Take the 2-minute tour ×
Ask Ubuntu is a question and answer site for Ubuntu users and developers. It's 100% free, no registration required.

i am looking for a way to replace MS AD. So i came across this document that kinda does it: https://help.ubuntu.com/community/SingleSignOn#Login_Manager_Configuration

but i would like to further lock down user desktops like it is described in this post: https://wiki.ubuntu.com/Specification/ConfigurationLockdown

How can i apply dconf profiles per ldap group? -is it possible to store them on a network share?

How can i apply locks per ldap group? -do i need to push them to "/etc/dconf/db/'database'.d/locks" or can i have locks on a network share?

How does dconf handle profile/lock updates?

Is there a best practice document that could help me?


share|improve this question

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.