Came here to day this. My workplace used to offer a Linux workstation option (which I opted in for 9 years), but they had to remove that option to fulfill new security and management, compliance standards. They need to be able to manage exactly which applications are installed on a system, which binaries are allowed to run and when, the exact settings for every application, the exact version of the OS and the specific updates, and precisely when updates are installed.
All of this needs to be applied based on the user, their organisational division, their security groups, clearance level, specific model of device, etc.
I know that using a combination of Selinux, Kerberos, and something like Puppet can get you close in the Linux world, but Microsoft group policy has been around for 30 years and is well understood and just works.
Came here to day this. My workplace used to offer a Linux workstation option (which I opted in for 9 years), but they had to remove that option to fulfill new security and management, compliance standards. They need to be able to manage exactly which applications are installed on a system, which binaries are allowed to run and when, the exact settings for every application, the exact version of the OS and the specific updates, and precisely when updates are installed. All of this needs to be applied based on the user, their organisational division, their security groups, clearance level, specific model of device, etc.
I know that using a combination of Selinux, Kerberos, and something like Puppet can get you close in the Linux world, but Microsoft group policy has been around for 30 years and is well understood and just works.