I ended up using dconf since Ubuntu Desktop natively uses the GNOME desktop. For any people unfamiliar with it, you can edit dconf settings via terminal or GUI. I ended up doing it via the terminal with the use of the following link @steeldriver mentioned in a comment: https://help.gnome.org/admin/system-admin-guide/stable/dconf-lockdown.html.en
Network settings will be locked behind a privilege wall by default I discovered after testing with a non-sudo account (stupid, i know..) so I did not have to adjust any settings on that.
For a school assignment I have been asked to lock the following three settings in place on both Windows and Linux workstations:
- Network Configuration (e.g. not being able to change IP's, DNS servers)
- Desktop Wallpaper
- Trusted sites (for this question not relevant since Trusted Sites is a Internet Explorer specific feature)
I know I can do this via Windows with GPO's, but I am unsure how to push this with Ubuntu Server 19.04. There are programs like Chef and Ansible, but both seem like very big packages for just these two specific settings. The users will be working on Ubuntu Desktop 18.04.
The Ubuntu workstation will be joined to a Windows Server AD and will need access to network shares. I believe the AD-integration and Samba will be able to fulfill this need, but I am bending my head over the GPO part.
I looked into SSSD, but I can't find if these two specific GPO settings are supported within Linux.
Most ideally any new deployed workstations would automatically take over these settings, but I'm not sure if that is realistic. Should I look into a bash-script that automatically runs upon logging in to set these settings static?