KACE Product Support

Yes, you can do it without problems.

The easiest way is to use winbind on the linux side:

http://www.samba.org/samba/docs/man/Samba-HOWTO-Collection/winbind.html

Or you can configure PAM to use LDAP (but this is a pain in the ass, trust me ...)

I don't think you can use a GPO to roll out the agent.

You can use provisioning from the KACE to do this or if you have only a few systems roll them out by hand.

Found this piece of software for a GPO for Linux:

http://www.centrify.com/directcontrol/grouppolicy.asp

Depending on which Linux you are using we may have many other ways.

Usually the function is vice versa, move Windows boxes into a Linux-network, this is where I have much more experience, unfortunately

Depending on your Linux distro, you might look into realmd - it nearly completely automates the joining process. It will tell you what packages you need to install (such as sssd, ldap, etc) and will just about configure it all for you. Just be aware that if your DC's will need to have "Windows Services for Unix" installed on them so that the LDAP fields get mapped correctly. I have just recently begun this adventure myself but so far have a working Fedora 19 install that is joined to the domain and even authenticates users with it.

Here's a link to the realmd project page: http://www.freedesktop.org/software/realmd/ It was included in the Fedora 19 install I started testing with, not sure about other Distros