SASAC Document No. 79 has put China's central SOEs on the clock. The countdown to full domestic IT substitution is now in motion.

One major power company isn't waiting. It has baked the replacement of 250,000 domestic endpoints into its 14th Five-Year digital transformation blueprint, betting the farm on stronger supply-chain security and true technological self-reliance at the endpoint layer. The rollout is already underway, with full coverage targeted over the next few years.

The Old Guard Is Failing: Five Cracks in the Armor

But here's the rub. As domestic endpoints flood in, traditional domain control systems are crumbling under the strain. The cracks are showing everywhere—especially around unified domain control for heterogeneous domestic platforms. Five pain points stand out:

· Identity vacuum: Endpoints lean on flimsy local passwords. Permissions are all over the map. No unified management means gaping security holes.

· Policy lag: Security policies can't be pushed out centrally. Admins are stuck configuring endpoints one by one—slow, error-prone, and no match for today's fast-moving threats.

· Perimeter collapse: Without proper access control, rogue devices slip onto the internal network undetected, creating blind spots that are impossible to monitor.

· Audit nightmare: Audit logs are scattered across endpoints like confetti. When an incident hits, tracing the breadcrumbs is a needle-in-a-haystack exercise.

· Management fracture: The Wintel-based AD architecture simply doesn't speak domestic OS. Domain join and domain exit operations break down, leaving a gaping hole in endpoint governance.

The Fix: Leagsoft's Domestic Domain Control—Full Replacement, Zero Drama

Faced with a collapsing domain control stack, Leagsoft stepped in with a homegrown alternative. Its domestic domain control solution doesn't just match Microsoft AD feature-for-feature—it goes further, delivering full compatibility with mainstream domestic operating systems.

An innovative protocol compatibility layer and integrated security engine enable domain authentication across Windows, UOS, Kylin, macOS, and Linux. The platform checks every compliance box: Chinese cryptographic standards, cross-platform group policy management, and high-availability deployment. For enterprises, that means a one-stop, frictionless replacement of Microsoft AD.

▲ Functional architecture of Leagsoft's domestic domain control system

Implementation follows a tiered architecture: server components deployed at both headquarters and provincial subsidiaries, working in tandem to support distributed, multi-site rollouts that scale to any environment.

What You Get: Independence, Intelligence, and Speed

Full-stack independence, external risks neutralized

Leagsoft's domestic domain control system is built from the ground up on self-developed directory technology—no foreign AD code in sight. From kernel to UI, every line is under independent control, eliminating supply-chain risks tied to external technology restrictions or potential backdoors. Critical infrastructure stays protected.

The flexibility edge is just as important. When organizational structures shift or business processes change, Leagsoft's engineering team can spin up custom features in a fraction of the time it takes overseas vendors to even return a call.

Automated workflows that put HR in the driver's seat

Gone are the days of new hires filling out account requests across a dozen systems. With Leagsoft's console, HR creates one unified enterprise account in a single step. That account then auto-propagates in real time to every connected business system. Job transfers, permission tweaks, offboarding—everything happens centrally, with one-click precision. Efficiency up, human error down.

Deep ecosystem integration for seamless access and bulletproof continuity

Leagsoft plays nice with the full domestic stack—operating systems, office suites, databases, you name it. Employees on domestic OS log in once via SSO and glide straight into enterprise resources. Behind the scenes, multiple domain controllers run in active-active redundancy with real-time data sync. If one controller goes down, the others pick up the load instantly. Business doesn't skip a beat—24/7, 365.

Rock-solid group policies that lock down identity and harden the network

The platform kills the patchwork of inconsistent authentication methods and uneven security levels. A unified strong-authentication framework is the new baseline, with MFA support for dynamic tokens and biometrics on top.

The real muscle, though, is in group policy. Admins slice users into groups by department, role, or business unit, then push granular policies—permissions, software restrictions, system configuration standards—centrally and at scale. Network access gets locked down to the exact level each user needs, and nothing more.

Battle-tested security that raises the bar on endpoint defense and red-team performance

Deploying Leagsoft's solution means sharper defenses against APTs, ransomware, and other endpoint threats. It also tightens governance around the "two highs and one weak"—high-risk vulnerabilities, high-risk ports, and weak passwords—while boosting scores in specialized security campaigns and national cyber defense exercises.