I would say the same but for authentication. We have linux servers on our domain, specifically becaeuse there are certain things they do better than windows, a

I would say the same but for authentication. We have linux servers on our domain, specifically becaeuse there are certain things they do better than windows, and im a tool for a trade kinda guy. But authentication and management of creds is a hard requirement. The rest i can work with. We setup Ansible to handle much of the day to day config things. GPO"s might be nice. At one and for years i was using PBIS, and whatever it was called before it was bought out, forked and named PBIS - https://github.com/BeyondTrust/pbis-open https://github.com/BeyondTrust/pbis-open I liked it because it kept GID/UID's consistent across the domain. But it was flaky for samba shares specifically ad group enumeration. There are paid add-ons that leverage GPO but never went that route. More recently we are just leveraging SSSD/Chrony/Smb/Nmb to do the same, there are a few tweaks, but its solid. Its actually more stable now. Some GPO's would be nice I supposed.