The funny thing is, the people who care about Group Policy and Active Directory are the same people who aren't happy about their network potentially being compromised because someone hooked up their work laptop up to a monitor at their home.

This is the one thing holding open source back, and the thing Linux users keep pissing on without understanding it.

The CTOs inept nephew can manage your fleet of windows machines and you get all the checkbox security you need for compliance (and some real security):

• Centrally managed
• Logs that are fairly hard to manipulate
• SecureBoot + Bitlocker

That same feature set on Linux will cost you a ton of money in skilled staff if you want to check the same compliance checkboxes. (As for real security, who cares, no one is doing that anyway)

Kind regards: someone who has managed Linux fleets.