How to ensure compliance with PC security criteria?

Question

Information Security

Good afternoon. There was a need to adapt working PCs to meet the criteria:
- Centralized group policies
- Centralized management of PC passwords (keeping a history of recent passwords, checking for complexity, number of characters).
How to fulfill these requirements without having a windows server (that is, without installing AD). Are there any other ways? Please advise what can be used

Answer 1

OpenLDAP - https://habr.com/post/86090/

Answer 2

centralized PC password management ... without setting up AD

Since your users are local and reading their passwords over the network is almost impossible, you will have to keep records manually, for example, in MS Excel spreadsheets.

Answer 3

1.IPA. There are different implementations, paid and not.
2. Samba-based AD, that is, a Windows network without Windows :)

Answer 4

As indicated above - enter AD on a Linux server ... as an option