this is presumably why guix calls itself "an advanced packaging management system". if you don't want to futz around with that kind of thing theres always ubuntu which mostly just works and even comes prebaked with activedirectory support so you can argue with your IT department about it :)