Show me an equivalent to Active Directory on Linux.

And no, allowing users to manage their machine themselves will break their entire computer and every server they can access. Most users never even read a warning if they can just click “OK”.