Adalanche VS adsys

You can find open source edition at GitHub (https://github.com/lkarlslund/Adalanche) as usual.

Adalanche - AD ACL Explorer/Visualizer - https://github.com/lkarlslund/Adalanche

Adalanche instantly shows what permissions users and groups have in Active Directory. Collects and analyzes information from AD or from local Windows machines. Allows you to find misconfigurations and see who can take over accounts, machines or the entire domain. Kindly recommended by dcdiagfix.

You could you try my tool adalanche (https://github.com/lkarlslund/adalanche), which visualizes who can do what in your Active Directory environment. Many managers aren't technical at all, but if they see a graph showing how Mike from HR can basically become DA and then assign himself permissions to read the Director of ITs emails, perhaps that could help convince them.

I'm working on an experimental addition to my graph based Active Directory analyzer "adalanche" (https://github.com/lkarlslund/adalanche) and as I'm more blue than red I could use some input from you.

Only suggestions I have would be to check the docs here: https://github.com/ubuntu/adsys/wiki/04.-Using-GPO

Ubuntu 21.04 hirsute includes adsys which is a linux active directory client.

Check out this: https://github.com/ubuntu/adsys/tree/main/internal/policies/ad/definitions/policy/Ubuntu/all

Looking at https://github.com/ubuntu/adsys (linked below by /u/SadFaceSmith it looks like they are providing an ADMX template for Ubuntu that you configure along side your windows GPO stuff. They aren't trying to parse the existing windows focused GPO stuff at all.

I am also trying to figure it out now. While creating the local user at installation there is a checkbox to join a domain, followed by some light configuration. I did that and the device is now showing up on my domain controller, but I am not able to log into the Ubuntu device with domain user accounts. The release notes say that there is a command adsysctl included by default, but I found I needed to install adsys myself, but I didn't get much further with it. I also saw that I was able to add domain accounts with the Users GUI once signed in with the local account, but I was not able to sign in with the account even after adding it here.