Hi
the pilot is mostly successful but here are my improvement ideas:
- domain integration Ad-ignore-errors in GPO's - some of those naturally will not apply to linux and user will not be able to login giving the user the impression that he enters wrong password, he will try with different ones and lock in the ad account
in /etc/sssd/sssd.conf
add
ad_gpo_ignore_unreadable = True
-
each user should be able to set printers and wifi - add all users to netdev and lpadmin group
-
domain admins should become machine sudoers - add domain admins in sudoers, i cannot imagine a rollout with AD integration where domain admin wouldn't like to be machine admin by default
-
setting user icon should not need root password, each user should be able to change his icon
-
add flathub user (not system) repo and make it default
-
freerdp repo use something between nighties and regular ubuntu as it is 2 dozen releases behind, freeRDP is the best way to use a terminal server to run win native apps that don't have Linux replacement
-
when trying to login to domain "applying user settings" is not translated, including some other small translations missing. Me and others would be more than happy to make sure 100% is translated
