I haven't done it, but Ansible would be the equivalent to group policies, no? The learning curve is very different though.

You can use Samba and Kerberos for identity management. But again, very different to use.