3.0 Managing Linux GPO Settings

If you have the AD Bridge GPEdit Extension for the Group Policy Management Console (GPMC) installed on your domain controller, you will see a new node, Linux Settings, under Computer Configuration when you open the Group Policy Object (GPO) editor on a GPO. This node has five child nodes, Firewall, Services, Configuration Files, Deploy Files, Execute Commands and AD Logins, which you can use to create, modify, or delete GPO settings for Linux Agent clients in the domain.

When you link a GPO that has rules configured in Linux Settings to an OU that has one or more AD Bridge Linux agents, those GPO settings are applied to the Linux computers in that OU (assuming the Linux Agent Service is running on those computers).

This section demonstrates how to create a new GPO and configure rules in the AD Bridge GPMC snap-in and apply them to your Linux Agent computers. When an AD Bridge Linux Agent is installed on a Linux computer, the computer is automatically added to the Active Directory’s “Computers” OU. As a best practice, you should create a custom OU for linking GPOs to Linux Agent computers in your environment.

IMPORTANT:To minimize the risk of introducing harmful Group Policy errors into your production environment, you should thoroughly test and evaluate Linux Agent GPOs in a non-production environment before you implement them.

For best practice information about configuring GPOs in AD Bridge, see GPO Best Practices.