All of our Linux servers are fully integrated into AD.
So you can administer everything with group policy then?