question for cloudron ldap/active directory

[adisonverlice2]

hi:
i have a question.
so i heard cloudron could act as an ldap/AD server.
so could i connect my windows computer to it and use the AD to manage the computer? kind of like you would regularly directory for computer management.
thanks

[girish]

Yes, https://docs.cloudron.io/user-directory/#directory-server

so could i connect my windows computer to it and use the AD to manage the computer?

this depends on what you mean by 'manage'. But you can add/remove users Cloudron and this in turn controls the authentication.

[adisonverlice2]

@girish interesting. but wait, if you do connect your actual computer to ldap, how would you manage things like the GPO and stuf like that?

[girish]

Cloudron directory server is only exposing the users that add in Cloudron (not even groups) via LDAP. It's primarily use case is for authentication in external apps. Other features (like GPO, but tbh, I have no idea what this is) are outside the scope.

[adisonverlice2]

@girish aw. by the way, GPO means group policy. its an active directory feature that can let the admins basically ctrl features of the pC sutch as microsoft defender, applocker, and basically administrative windows policy.

[girish]

@adisonverlice2 ah, I see, thanks. So, intent of Cloudron's Directory Server is not to replace/compete with AD. It's just a way for apps to authenticate. It's not meant to replace a full blown LDAP like manage user profiles (pictures), groups, organization trees etc.