EasyDC

Easy Domain Controller — manage a Samba Active Directory domain controller from anywhere.

EasyDC provides a clean, secure remote administration tool for Samba-based Active Directory Domain Controllers. Instead of logging directly into the server or struggling with complex command lines, you can manage users, groups, organization units, and Group Policy Objects (GPOs) from your workstation using a modern CLI tool or REST API.

---

Key Capabilities

• Active Directory Management: Add, edit, disable, or delete domain objects securely over the network.
• Group Policy Control: Apply and manage GPOs across target Organizational Units (OUs).
• Modern Auth: Multi-factor authentication (MFA) and granular role-based access controls (RBAC) protect administration APIs.
• Memory-Safe Agent: Running on the Samba DC host, a tiny Rust agent executes domain updates locally.

---

Administration CLI Examples

EasyDC comes with an easy-to-use client utility (easydc) that communicates with the remote server agent.

1. Add a Domain User

Create a new directory object and immediately assign them to domain groups:

easydc user add \
  --username jsmith \
  --name "John Smith" \
  --email jsmith@easysys.io \
  --groups "Domain Admins,Developers"

2. Lock / Unlock a User Account

Quickly manage account access status:

# Lock the account
easydc user lock jsmith

# Unlock the account
easydc user unlock jsmith

3. Manage Group Policies

Link an existing Group Policy Object (GPO) to a target Organizational Unit:

easydc gpo link \
  --gpo-name "RestrictedUSB" \
  --ou "OU=Workstations,DC=easysys,DC=io"

---

System Compatibility

Category	Supported Technologies
Samba Versions	Samba 4.15 through 4.20+
Directory Mode	Active Directory Domain Controller (AD DC)
API Transport	gRPC over TLS with mutual TLS (mTLS) authentication
OS Compatibility	Linux (Ubuntu, Debian, RedHat, Rocky Linux)