Linux AD Domain Setup

I need a clean, production-ready Active Directory domain running on my Linux server stack. The environment is small—no more than fifty user accounts—but it must deliver the same core features you would expect from a Windows-based AD:

• Centralised user authentication so every workstation logs in against the domain.
• Usable group policies that let me push security and desktop settings.
• Fine-grained resource access control for our shared folders and printers.

You’re free to choose the best-fit open-source tools (Samba 4, Kerberos, Winbind, realmd, etc.) as long as the end result behaves like native AD from the perspective of both Linux and occasional Windows clients.

Deliverables
1. Fully configured domain controller on an up-to-date Linux distribution.
2. One sample workstation joined and demonstrating log-in, policy application and resource access.
3. Written hand-off: commands, config files and a short troubleshooting guide.

I’ll provide SSH access to a fresh VM and hostname details; you handle the rest, test it end-to-end, then walk me through the steps so I can reproduce the build if needed.