# Microsoft Active Directory

42 Hacker News commenters recommended Microsoft Active Directory and 29 criticized it, November 2025 to November 2026. It was recommended in 10 of 13 months.

**Verdict:** Recommended as the mature, well-integrated way to manage users and devices at scale. Common caveat: security weaknesses, including risky delegation.

## Why people recommend it

- No comparable alternative exists (7 comments): "no comparable replacement for Active Directory DCs which run every major company on Planet Earth" ([source](https://news.ycombinator.com/item?id=47857719)) "it can not match the features offered by Active Directory like AD controller replication" ([source](https://news.ycombinator.com/item?id=47850407)) "Comparable, well integrated easy to use solutions didn't exist at the time." ([source](https://news.ycombinator.com/item?id=46028960))
- Integrates tightly with Microsoft tools (6 comments): "Ask me a decade ago what an enterprise should do, and my answer would be straightforward: AD, GPO, Exchange." ([source](https://news.ycombinator.com/item?id=47716998)) "Microsofts advantage is ActiveDirectory integration. Centrally managed users and machines" ([source](https://news.ycombinator.com/item?id=47151008)) "Nothing come close to Active Directory + Group Policy, not even Entra ID + Intune." ([source](https://news.ycombinator.com/item?id=48725350))
- Centralized management of users and devices (6 comments): "the answer for managing 25,000 endpoints was to use Windows devices with Active Directory as the management plane" ([source](https://news.ycombinator.com/item?id=47717281)) "The most die-hard Linux folks I know turn to AD the minute they need to manage users and devices at scale" ([source](https://news.ycombinator.com/item?id=46871210)) "made Windows by far the best mainstream ecosystem to manage hundreds or thousands of corporate desktops" ([source](https://news.ycombinator.com/item?id=48587795))
- Well documented and easy to use (5 comments): "Active Directory was afflicted by impossibly tiny windows for the management tabs, but the functionality worked" ([source](https://news.ycombinator.com/item?id=46203731)) "AD is well documented, functions generally the same everywhere, and has an intuitive enough interface" ([source](https://news.ycombinator.com/item?id=47736223)) "Active Directory is a very no-code tool and has a ton of documentation and certifications online" ([source](https://news.ycombinator.com/item?id=46279085))

## What people warn about

- Security holes and exploitable design (5 comments): "AD allows connections between two computers that are registered against the active directory, including a random laptop and the AD themselves" ([source](https://news.ycombinator.com/item?id=46357562)) "Problem was that delegation was not constrained, which makes it even worse the oauth authorization sprawl we have now." ([source](https://news.ycombinator.com/item?id=46607558)) "Wait until it gets hacked. You will lose DNS, DHCP, Email, file servers, web servers, endpoints, etc." ([source](https://news.ycombinator.com/item?id=45815261))
- Bolted-together, dated ecosystem (5 comments): "They extended DNS, LDAP and Kerberos to make Active Directory so that now every Microsoft-locked corporation is stuck" ([source](https://news.ycombinator.com/item?id=48976098)) "make Sharepoint/Office/Active Directory as terrible as it possibly could be while still technically being functional" ([source](https://news.ycombinator.com/item?id=47923066)) "Windows that has AD teeth sunk into it where everything is "managed by your organization."" ([source](https://news.ycombinator.com/item?id=47430351))
- Legacy .local naming guidance (2 comments): "They used to have training material incentivizing professionals to use .local as TLD for Active Directory realms." ([source](https://news.ycombinator.com/item?id=46732765)) "Back then their training material recommended .local for Active Directory services." ([source](https://news.ycombinator.com/item?id=50007894))
- Hard to integrate with non-Microsoft tools (2 comments): "you still can't connect your open source DNS and DHCP server to a Microsoft domain controller" ([source](https://news.ycombinator.com/item?id=48343872)) "Active Directory seemed so hostile to any external hardware controlling the network." ([source](https://news.ycombinator.com/item?id=49429624))

## Where to get it

- [Visit the official site](https://www.microsoft.com/en-us/windows-server)

## Cite as

Hacker Approved, "Microsoft Active Directory", https://hackerapproved.com/p/active-directory/ (counts from 1,795,640 Hacker News comments, November 2025 to November 2026).