On 2018-07-27 19:46, Foxtrot Mike via arch-general wrote: > > The issue with x2go and ltsp is that I'll have to separately manage > username and passwords for local Linux login. The solution that I'd > rather prefer would use Active directory authentication so the current > system administrator won't have to do anything extra. The group policies > are already there. Once the Arch system is properly configured, I'd > disable local logins so there will be very limited chance for a user to > corrupt/modify Arch system. And ideally, the user would have no way to > interact with the local system. Thats why I want to limit the user to > freeRDP. Anything else, and the X-session expires. I'm not up to speed on the windows world, but could PAM LDAP authentication perhaps be of help here? Regards,