{"id":7951,"date":"2019-12-04T17:00:00","date_gmt":"2019-12-04T17:00:00","guid":{"rendered":"https:\/\/www.jumpcloud.com\/blog\/?p=7786"},"modified":"2020-03-30T09:32:04","modified_gmt":"2020-03-30T15:32:04","slug":"cloud-gpos-group-policy-objects","status":"publish","type":"post","link":"https:\/\/jumpcloud.com\/blog\/cloud-gpos-group-policy-objects","title":{"rendered":"Cloud GPOs (Group Policy Objects ) X-Platform – JumpCloud"},"content":{"rendered":"\n
Cloud GPOs (Group Policy Objects) are an intriguing concept. A critical function of the on-prem, Microsoft Active Directory\u00ae<\/a> (AD) platform, traditional GPOs enable IT admins to execute tasks across fleets of domain-bound Windows\u00ae systems. <\/p>\n\n\n\n Traditional GPOs are used to configure Windows system policies like screen lock timeout, BitLocker encryption, and USB port functionality to name a few examples. AD offers IT admins the ability to deploy a library of GPOs remotely across Windows system groups.<\/p>\n\n\n\n Yet, as the IT landscape shifts to the cloud and expands to include macOS\u00ae and Linux\u00ae systems, traditional GPOs start to feel limited. Admins need a GPO-like alternative<\/a> that supports the diverse system environments of the modern era. <\/p>\n\n\n\n Traditional GPOs are a Microsoft construct inherent to the AD platform. A strictly on-prem directory services solution, the concept of cloud GPOs doesn\u2019t exist within the native AD domain. <\/p>\n\n\n\n While it is possible to host a traditional AD domain in the cloud via Infrastructure-as-a-Service (IaaS) providers, IT admins will still suffer the pitfalls of the legacy directory services solution. Primarily, the lack of group policy management for macOS and Linux<\/a> remains. <\/p>\n\n\n\n Fortunately, there are third-party directory extension technologies that offer GPO-like functionality for macOS and Linux. These solutions often layer on top of AD on-prem. However, this approach seems counterintuitive for cloud-forward IT admins as it further entrenches organizations with legacy identity management infrastructure. <\/p>\n\n\n\n Another thought is that IT organizations can leverage Azure\u00ae Active Directory (AAD) to provide cloud GPOs. Azure AD is Microsoft\u2019s cloud identity management solution for Azure infrastructure, and many thought it would be the cloud replacement for AD. <\/p>\n\n\n\n Unfortunately, AAD is not a replacement<\/a> for on-prem AD. Azure AD is realistically designed to be another add-on to AD, providing user management for Azure infrastructure and single sign-on (SSO) capabilities for web applications. Not only does Azure lack GPOs for macOS and Linux, but Windows systems as well.<\/p>\n\n\n\n Consequently, IT admins will still need a traditional AD implementation to have GPOs for Windows and to fully sync users with on-prem and cloud systems. That\u2019s in addition to directory extensions of macOS and Linux as well. <\/p>\n\n\n\n Clearly, Azure AD will not suffice if the goal is to provide cloud GPOs for Windows, macOS, and Linux. <\/p>\n\n\n\n The modern IT landscape is no longer the Microsoft-exclusive environment that it used to be. Now, it\u2019s a mixture of Windows machines and a great deal of macOS and Linux systems, both on-prem and in the cloud. <\/p>\n\n\n\n Presently, it\u2019s essential to control and manage devices with a cross-platform approach. Active Directory doesn\u2019t have the functionality of cross-platform GPOs<\/a>, nor cloud GPOs via Azure AD, and it\u2019s forcing IT admins to find other ways to manage their macOS and Linux systems remotely.<\/p>\n\n\n\n As the IT landscape evolves into a diverse ecosystem of systems and servers, the need for cloud GPOs cannot be denied. Adapting to the changing environment is simply the logical approach. <\/p>\n\n\n\n Fortunately, the concept of cloud GPOs isn\u2019t a Microsoft construct. A new generation of cloud identity management platform called Directory-as-a-Service\u00ae<\/a> reimagines Active Directory and LDAP, in this case by providing a cross-platform, cloud GPO-like solution. <\/p>\n\n\n\n Called Policies<\/a>, these command templates execute standard tasks in cross-platform system environments. They also grant the ability to execute customized commands and scripts on Windows, macOS, and Linux devices. <\/p>\n\n\n\n With these commands and scripts, admins ensure that their systems are properly secured and that they meet compliance, regardless of the location or vendor. Directory-as-a-Service delivers next generation system and identity management capabilities from the cloud.<\/p>\n\n\n\n Alternatively, admins can leverage the JumpCloud AD Integration<\/a> utility to extend AD user identities to unbound domain resources. In this respect, it is possible to leverage cross-platform cloud GPOs while retaining AD as the authoritative IdP. <\/p>\n\n\n\n Video link: https:\/\/jumpcloud-1.wistia.com\/medias\/upz1bgkdb1<\/a> Contact us to learn more about the Directory-as-a-Service platform and how it can provide a cloud GPO solution<\/a> for cross-platform system environments. Sign up for a free account<\/a> and check it out for yourself. Your first 10 users are free forever. GPOs have always been a vital part of Microsoft AD’s platform. Now that IT is moving to the cloud though, many admins are wondering if cloud GPOs exist.<\/p>\n","protected":false},"author":54,"featured_media":43265,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_oasis_is_in_workflow":0,"_oasis_original":0,"_oasis_task_priority":"","inline_featured_image":false,"footnotes":""},"categories":[23],"tags":[],"collection":[2778],"platform":[],"funnel_stage":[3016],"coauthors":[],"acf":[],"yoast_head":"\nDo Cloud GPOs Exist in AD?<\/h2>\n\n\n\n
Does Azure AD Have Group Policy?<\/h2>\n\n\n\n
Do I Need Cloud GPOs?<\/h2>\n\n\n\n
Cloud GPO Alternative to AD<\/h2>\n\n\n\n
More on Cloud GPO-like Functionality<\/h2>\n\n\n\n
<\/p>\n\n\n\n
<\/p>\n","protected":false},"excerpt":{"rendered":"