Microsoft Active Directory
Directory server
Recommended as the mature, well-integrated way to manage users and devices at scale. Common caveat: security weaknesses, including risky delegation.
Recommended as the mature, well-integrated way to manage users and devices at scale. Common caveat: security weaknesses, including risky delegation.
71 people gave an opinion
- recommend it
- 42
- criticize it
- 29
- approval share
- 59%
Recommended in 10 of 13 months
- November 2025: recommended
- December 2025: recommended
- January 2026: recommended
- February 2026: recommended
- March 2026: recommended
- April 2026: recommended
- May 2026: not recommended
- June 2026: recommended
- July 2026: not recommended
- August 2026: recommended
- September 2026: recommended
- October 2026: recommended
- November 2026: not recommended (month in progress)
Why it doesn’t carry the badge
- 42 people recommend itNeeds 10 or more, met.
- 1.4 recommenders for every criticNeeds 2 to 1 or better, not met.
- Recommended in 10 of 13 monthsNeeds 4 or more, met.
The same three rules apply to every product, and the badge can’t be bought. How the badge works
What people say about it
The reasons people give, with the number of comments that give each one. Open a reason to read what they said.
Why people recommend it
Each mark is one comment
No comparable alternative exists
“no comparable replacement for Active Directory DCs which run every major company on Planet Earth”
Comment from 22 Apr 2026 in “Windows Server 2025 Runs Better on ARM” “it can not match the features offered by Active Directory like AD controller replication”
Comment from 21 Apr 2026 in “Tim Cook's Impeccable Timing” “Comparable, well integrated easy to use solutions didn't exist at the time.”
Comment from 24 Nov 2025 in “1M Downloads of Zorin OS 18” - Comment from 19 Jan 2026 in “Prediction: Microsoft Is Going to Do the Funniest Thing Imaginable”
- Comment from 10 Apr 2026 in “France Launches Government Linux Desktop Plan as Windows Exit Begins”
- Comment from 17 Dec 2025 in “Pricing Changes for GitHub Actions”
- Comment from 19 Jan 2026 in “Prediction: Microsoft Is Going to Do the Funniest Thing Imaginable”
Integrates tightly with Microsoft tools
“Ask me a decade ago what an enterprise should do, and my answer would be straightforward: AD, GPO, Exchange.”
Comment from 10 Apr 2026 in “France Launches Government Linux Desktop Plan as Windows Exit Begins” “Microsofts advantage is ActiveDirectory integration. Centrally managed users and machines”
Comment from 25 Feb 2026 in “Danish Gov agency to ditch Microsoft software in push for digital independence” “Nothing come close to Active Directory + Group Policy, not even Entra ID + Intune.”
Comment from 29 Jun 2026 in “Microsoft Needs Windows Lite” - Comment from 17 Jun 2026 in “Humiliating IIS servers for fun and jail time”
- Comment from 8 Feb 2026 in “Billing can be bypassed using a combo of subagents with an agent definition”
- Comment from 4 Aug 2026 in “Xbox goes down. You can't play games you own on disc”
Centralized management of users and devices
“the answer for managing 25,000 endpoints was to use Windows devices with Active Directory as the management plane”
Comment from 10 Apr 2026 in “France Launches Government Linux Desktop Plan as Windows Exit Begins” “The most die-hard Linux folks I know turn to AD the minute they need to manage users and devices at scale”
Comment from 3 Feb 2026 in “Claude Code is suddenly everywhere inside Microsoft” “made Windows by far the best mainstream ecosystem to manage hundreds or thousands of corporate desktops”
Comment from 18 Jun 2026 in “Microsoft new Outlook takes 10 seconds to do what Outlook Classic does instantly” - Comment from 29 Oct 2026 in “Leak Exposes 41,000 Homeland Security Workers–Including Undercover ICE Agents”
- Comment from 24 Mar 2026 in “Microsoft's "Fix" for Windows 11: Flowers After the Beating”
- Comment from 17 Jan 2026 in “PCs refuse to shut down after Microsoft patch”
Well documented and easy to use
“Active Directory was afflicted by impossibly tiny windows for the management tabs, but the functionality worked”
Comment from 9 Dec 2025 in “Microsoft has a problem: lack of demand for its AI products” “AD is well documented, functions generally the same everywhere, and has an intuitive enough interface”
Comment from 12 Apr 2026 in “France Launches Government Linux Desktop Plan as Windows Exit Begins” “Active Directory is a very no-code tool and has a ton of documentation and certifications online”
Comment from 15 Dec 2025 in “Microsoft increases Office 365 and Microsoft 365 license prices” - Comment from 18 Feb 2026 in “Native FreeBSD Kerberos/LDAP with FreeIPA/IDM”
- Comment from 28 Nov 2025 in “Can Dutch universities do without Microsoft?”
What people warn about
Each mark is one comment
Security holes and exploitable design
“AD allows connections between two computers that are registered against the active directory, including a random laptop and the AD themselves”
Comment from 22 Dec 2025 in “Microsoft will kill obsolete cipher that has wreaked decades of havoc” “Problem was that delegation was not constrained, which makes it even worse the oauth authorization sprawl we have now.”
Comment from 13 Jan 2026 in “Signal leaders warn agentic AI is an insecure, unreliable surveillance risk” “Wait until it gets hacked. You will lose DNS, DHCP, Email, file servers, web servers, endpoints, etc.”
Comment from 4 Nov 2025 in “This week in 1988, Robert Morris unleashed his eponymous worm” - Comment from 22 Dec 2025 in “Microsoft will kill obsolete cipher that has wreaked decades of havoc”
- Comment from 22 Dec 2025 in “Microsoft will kill obsolete cipher that has wreaked decades of havoc”
Bolted-together, dated ecosystem
“They extended DNS, LDAP and Kerberos to make Active Directory so that now every Microsoft-locked corporation is stuck”
Comment from 20 Jul 2026 in “How proprietary formats have become Microsoft’s main tool for lock-in” “make Sharepoint/Office/Active Directory as terrible as it possibly could be while still technically being functional”
Comment from 27 Apr 2026 in “Microsoft to Stop Sharing Revenue with Main AI Partner OpenAI” “Windows that has AD teeth sunk into it where everything is "managed by your organization."”
Comment from 18 Mar 2026 in “Federal Cyber Experts Called Microsoft's Cloud "A Pile of Shit", yet Approved It” - Comment from 15 Jul 2026 in “Microsoft Patches a Record 570 Security Flaws”
- Comment from 18 Nov 2025 in “Windows 11 adds AI agent that runs in background with access to personal folders”
Legacy .local naming guidance
“They used to have training material incentivizing professionals to use .local as TLD for Active Directory realms.”
Comment from 23 Jan 2026 in “Microsoft Mishandling Example.com” “Back then their training material recommended .local for Active Directory services.”
Comment from 8 Oct 2026 in “New gTLD Application for .lan” Hard to integrate with non-Microsoft tools
“you still can't connect your open source DNS and DHCP server to a Microsoft domain controller”
Comment from 31 May 2026 in “Microsoft degrades functionality of perpetually-licensed offline products” “Active Directory seemed so hostile to any external hardware controlling the network.”
Comment from 25 Aug 2026 in “Over 170k Nonprofits Lost All Their Data. Is Microsoft to Blame?”
What people said
40 of the 77 comments that mention it, newest first. Each links to the original comment.
“When we had local, properly integrated AD no one had to log into anything other than their computer.”
“Back then their training material recommended .local for Active Directory services.”
“Active Directory seemed so hostile to any external hardware controlling the network.”
“The whole ecosystem of AD+GPO+ Exchange since 2000 is unparalleled”
“They extended DNS, LDAP and Kerberos to make Active Directory so that now every Microsoft-locked corporation is stuck”
“SharePoint and AD are so god-forsakenly awful you would think they're vibe coded”
“Nothing come close to Active Directory + Group Policy, not even Entra ID + Intune.”
“made Windows by far the best mainstream ecosystem to manage hundreds or thousands of corporate desktops”
“It integrates well with AD so some really complex tasks become stupid simple.”
“you still can't connect your open source DNS and DHCP server to a Microsoft domain controller”
“make Sharepoint/Office/Active Directory as terrible as it possibly could be while still technically being functional”
“no comparable replacement for Active Directory DCs which run every major company on Planet Earth”
“it can not match the features offered by Active Directory like AD controller replication”
“AD is well documented, functions generally the same everywhere, and has an intuitive enough interface”
“the answer for managing 25,000 endpoints was to use Windows devices with Active Directory as the management plane”
“Ask me a decade ago what an enterprise should do, and my answer would be straightforward: AD, GPO, Exchange.”
“I haven't found a better alternative than active directory”
“Linux still doesn't have anywhere near as nice and cohesive as Group Policy, Active Directory etc.”
“Is its probably the most complete tool I used for humans and device managers.”
“Windows that has AD teeth sunk into it where everything is "managed by your organization."”
“Microsofts advantage is ActiveDirectory integration. Centrally managed users and machines”
“integrated this stack with an easy to use graphical interface for almost 30 years”
“ActiveDirectory, Exchange (on-prem) and Office are all still fixable”
“The most die-hard Linux folks I know turn to AD the minute they need to manage users and devices at scale”
“They used to have training material incentivizing professionals to use .local as TLD for Active Directory realms.”
“Ansible and FreeIPA can’t hold a candle to Active Directory”
“Active Directory is unmatched.”
“You still need AD to provide centralized authentication/authorization.”
“Problem was that delegation was not constrained, which makes it even worse the oauth authorization sprawl we have now.”
“In the AD world, allowing remote code execution is not a bug, it's a feature.”
“AD allows connections between two computers that are registered against the active directory, including a random laptop and the AD themselves”
“AD has built-in mecanisms where a random person can execute code on the AD themselves”
“It's actually really good at what it is: a highly-available Kerberos implementation with an integrated directory server.”
“There is still no equivalent alternative to AD.”
“Active Directory is a very no-code tool and has a ton of documentation and certifications online”
“Active Directory was afflicted by impossibly tiny windows for the management tabs, but the functionality worked”
“I really like how AD works”
“Comparable, well integrated easy to use solutions didn't exist at the time.”
“They bolted products onto Active Directory which is ancient LDAP tech.”
“Wait until it gets hacked. You will lose DNS, DHCP, Email, file servers, web servers, endpoints, etc.”
Counts come from 1,795,640 Hacker News comments, November 2025 to November 2026. How we count. Report a mistake.