Hacker ApprovedDepartments

Microsoft Active Directory

Directory server

Recommended as the mature, well-integrated way to manage users and devices at scale. Common caveat: security weaknesses, including risky delegation.

Recommended as the mature, well-integrated way to manage users and devices at scale. Common caveat: security weaknesses, including risky delegation.

71 people gave an opinion

recommend it
42
criticize it
29
approval share
59%
Each figure is one person. RecommendsCriticizes

Recommended in 10 of 13 months

  1. November 2025: recommended
  2. December 2025: recommended
  3. January 2026: recommended
  4. February 2026: recommended
  5. March 2026: recommended
  6. April 2026: recommended
  7. May 2026: not recommended
  8. June 2026: recommended
  9. July 2026: not recommended
  10. August 2026: recommended
  11. September 2026: recommended
  12. October 2026: recommended
  13. November 2026: not recommended (month in progress)

Why it doesn’t carry the badge

  • 42 people recommend itNeeds 10 or more, met.
  • 1.4 recommenders for every criticNeeds 2 to 1 or better, not met.
  • Recommended in 10 of 13 monthsNeeds 4 or more, met.

The same three rules apply to every product, and the badge can’t be bought. How the badge works

What people say about it

The reasons people give, with the number of comments that give each one. Open a reason to read what they said.

Why people recommend it

Each mark is one comment

  • No comparable alternative exists

    “no comparable replacement for Active Directory DCs which run every major company on Planet Earth”

    Comment from 22 Apr 2026 in “Windows Server 2025 Runs Better on ARM”

    “it can not match the features offered by Active Directory like AD controller replication”

    Comment from 21 Apr 2026 in “Tim Cook's Impeccable Timing”

    “Comparable, well integrated easy to use solutions didn't exist at the time.”

    Comment from 24 Nov 2025 in “1M Downloads of Zorin OS 18”
  • Integrates tightly with Microsoft tools

    “Ask me a decade ago what an enterprise should do, and my answer would be straightforward: AD, GPO, Exchange.”

    Comment from 10 Apr 2026 in “France Launches Government Linux Desktop Plan as Windows Exit Begins”

    “Microsofts advantage is ActiveDirectory integration. Centrally managed users and machines”

    Comment from 25 Feb 2026 in “Danish Gov agency to ditch Microsoft software in push for digital independence”

    “Nothing come close to Active Directory + Group Policy, not even Entra ID + Intune.”

    Comment from 29 Jun 2026 in “Microsoft Needs Windows Lite”
  • Centralized management of users and devices

    “the answer for managing 25,000 endpoints was to use Windows devices with Active Directory as the management plane”

    Comment from 10 Apr 2026 in “France Launches Government Linux Desktop Plan as Windows Exit Begins”

    “The most die-hard Linux folks I know turn to AD the minute they need to manage users and devices at scale”

    Comment from 3 Feb 2026 in “Claude Code is suddenly everywhere inside Microsoft”

    “made Windows by far the best mainstream ecosystem to manage hundreds or thousands of corporate desktops”

    Comment from 18 Jun 2026 in “Microsoft new Outlook takes 10 seconds to do what Outlook Classic does instantly”
  • Well documented and easy to use

    “Active Directory was afflicted by impossibly tiny windows for the management tabs, but the functionality worked”

    Comment from 9 Dec 2025 in “Microsoft has a problem: lack of demand for its AI products”

    “AD is well documented, functions generally the same everywhere, and has an intuitive enough interface”

    Comment from 12 Apr 2026 in “France Launches Government Linux Desktop Plan as Windows Exit Begins”

    “Active Directory is a very no-code tool and has a ton of documentation and certifications online”

    Comment from 15 Dec 2025 in “Microsoft increases Office 365 and Microsoft 365 license prices”

What people warn about

Each mark is one comment

  • Security holes and exploitable design

    “AD allows connections between two computers that are registered against the active directory, including a random laptop and the AD themselves”

    Comment from 22 Dec 2025 in “Microsoft will kill obsolete cipher that has wreaked decades of havoc”

    “Problem was that delegation was not constrained, which makes it even worse the oauth authorization sprawl we have now.”

    Comment from 13 Jan 2026 in “Signal leaders warn agentic AI is an insecure, unreliable surveillance risk”

    “Wait until it gets hacked. You will lose DNS, DHCP, Email, file servers, web servers, endpoints, etc.”

    Comment from 4 Nov 2025 in “This week in 1988, Robert Morris unleashed his eponymous worm”
  • Bolted-together, dated ecosystem

    “They extended DNS, LDAP and Kerberos to make Active Directory so that now every Microsoft-locked corporation is stuck”

    Comment from 20 Jul 2026 in “How proprietary formats have become Microsoft’s main tool for lock-in”

    “make Sharepoint/Office/Active Directory as terrible as it possibly could be while still technically being functional”

    Comment from 27 Apr 2026 in “Microsoft to Stop Sharing Revenue with Main AI Partner OpenAI”

    “Windows that has AD teeth sunk into it where everything is "managed by your organization."”

    Comment from 18 Mar 2026 in “Federal Cyber Experts Called Microsoft's Cloud "A Pile of Shit", yet Approved It”
  • Legacy .local naming guidance

    “They used to have training material incentivizing professionals to use .local as TLD for Active Directory realms.”

    Comment from 23 Jan 2026 in “Microsoft Mishandling Example.com”

    “Back then their training material recommended .local for Active Directory services.”

    Comment from 8 Oct 2026 in “New gTLD Application for .lan”
  • Hard to integrate with non-Microsoft tools

    “you still can't connect your open source DNS and DHCP server to a Microsoft domain controller”

    Comment from 31 May 2026 in “Microsoft degrades functionality of perpetually-licensed offline products”

    “Active Directory seemed so hostile to any external hardware controlling the network.”

    Comment from 25 Aug 2026 in “Over 170k Nonprofits Lost All Their Data. Is Microsoft to Blame?”

What people said

40 of the 77 comments that mention it, newest first. Each links to the original comment.

“When we had local, properly integrated AD no one had to log into anything other than their computer.”

RecommendsComment from 29 Oct 2026 in “Leak Exposes 41,000 Homeland Security Workers–Including Undercover ICE Agents”

“Back then their training material recommended .local for Active Directory services.”

CriticizesComment from 8 Oct 2026 in “New gTLD Application for .lan”

“Active Directory seemed so hostile to any external hardware controlling the network.”

CriticizesComment from 25 Aug 2026 in “Over 170k Nonprofits Lost All Their Data. Is Microsoft to Blame?”

“The whole ecosystem of AD+GPO+ Exchange since 2000 is unparalleled”

RecommendsComment from 4 Aug 2026 in “Xbox goes down. You can't play games you own on disc”

“They extended DNS, LDAP and Kerberos to make Active Directory so that now every Microsoft-locked corporation is stuck”

CriticizesComment from 20 Jul 2026 in “How proprietary formats have become Microsoft’s main tool for lock-in”

“SharePoint and AD are so god-forsakenly awful you would think they're vibe coded”

CriticizesComment from 15 Jul 2026 in “Microsoft Patches a Record 570 Security Flaws”

“Nothing come close to Active Directory + Group Policy, not even Entra ID + Intune.”

RecommendsComment from 29 Jun 2026 in “Microsoft Needs Windows Lite”

“made Windows by far the best mainstream ecosystem to manage hundreds or thousands of corporate desktops”

RecommendsComment from 18 Jun 2026 in “Microsoft new Outlook takes 10 seconds to do what Outlook Classic does instantly”

“It integrates well with AD so some really complex tasks become stupid simple.”

RecommendsComment from 17 Jun 2026 in “Humiliating IIS servers for fun and jail time”

“you still can't connect your open source DNS and DHCP server to a Microsoft domain controller”

CriticizesComment from 31 May 2026 in “Microsoft degrades functionality of perpetually-licensed offline products”

“make Sharepoint/Office/Active Directory as terrible as it possibly could be while still technically being functional”

CriticizesComment from 27 Apr 2026 in “Microsoft to Stop Sharing Revenue with Main AI Partner OpenAI”

“no comparable replacement for Active Directory DCs which run every major company on Planet Earth”

RecommendsComment from 22 Apr 2026 in “Windows Server 2025 Runs Better on ARM”

“it can not match the features offered by Active Directory like AD controller replication”

RecommendsComment from 21 Apr 2026 in “Tim Cook's Impeccable Timing”

“AD is well documented, functions generally the same everywhere, and has an intuitive enough interface”

RecommendsComment from 12 Apr 2026 in “France Launches Government Linux Desktop Plan as Windows Exit Begins”

“the answer for managing 25,000 endpoints was to use Windows devices with Active Directory as the management plane”

RecommendsComment from 10 Apr 2026 in “France Launches Government Linux Desktop Plan as Windows Exit Begins”

“Ask me a decade ago what an enterprise should do, and my answer would be straightforward: AD, GPO, Exchange.”

RecommendsComment from 10 Apr 2026 in “France Launches Government Linux Desktop Plan as Windows Exit Begins”

“I haven't found a better alternative than active directory”

RecommendsComment from 10 Apr 2026 in “France Launches Government Linux Desktop Plan as Windows Exit Begins”

“Linux still doesn't have anywhere near as nice and cohesive as Group Policy, Active Directory etc.”

RecommendsComment from 10 Apr 2026 in “France Launches Government Linux Desktop Plan as Windows Exit Begins”

“Is its probably the most complete tool I used for humans and device managers.”

RecommendsComment from 24 Mar 2026 in “Microsoft's "Fix" for Windows 11: Flowers After the Beating”

“Windows that has AD teeth sunk into it where everything is "managed by your organization."”

CriticizesComment from 18 Mar 2026 in “Federal Cyber Experts Called Microsoft's Cloud "A Pile of Shit", yet Approved It”

“Microsofts advantage is ActiveDirectory integration. Centrally managed users and machines”

MixedComment from 25 Feb 2026 in “Danish Gov agency to ditch Microsoft software in push for digital independence”

“integrated this stack with an easy to use graphical interface for almost 30 years”

RecommendsComment from 18 Feb 2026 in “Native FreeBSD Kerberos/LDAP with FreeIPA/IDM”

“ActiveDirectory, Exchange (on-prem) and Office are all still fixable”

RecommendsComment from 8 Feb 2026 in “Billing can be bypassed using a combo of subagents with an agent definition”

“The most die-hard Linux folks I know turn to AD the minute they need to manage users and devices at scale”

RecommendsComment from 3 Feb 2026 in “Claude Code is suddenly everywhere inside Microsoft”

“They used to have training material incentivizing professionals to use .local as TLD for Active Directory realms.”

CriticizesComment from 23 Jan 2026 in “Microsoft Mishandling Example.com”

“Ansible and FreeIPA can’t hold a candle to Active Directory”

RecommendsComment from 19 Jan 2026 in “Prediction: Microsoft Is Going to Do the Funniest Thing Imaginable”

“Active Directory is unmatched.”

RecommendsComment from 19 Jan 2026 in “Prediction: Microsoft Is Going to Do the Funniest Thing Imaginable”

“You still need AD to provide centralized authentication/authorization.”

RecommendsComment from 17 Jan 2026 in “PCs refuse to shut down after Microsoft patch”

“Problem was that delegation was not constrained, which makes it even worse the oauth authorization sprawl we have now.”

CriticizesComment from 13 Jan 2026 in “Signal leaders warn agentic AI is an insecure, unreliable surveillance risk”

“In the AD world, allowing remote code execution is not a bug, it's a feature.”

CriticizesComment from 22 Dec 2025 in “Microsoft will kill obsolete cipher that has wreaked decades of havoc”

“AD allows connections between two computers that are registered against the active directory, including a random laptop and the AD themselves”

CriticizesComment from 22 Dec 2025 in “Microsoft will kill obsolete cipher that has wreaked decades of havoc”

“AD has built-in mecanisms where a random person can execute code on the AD themselves”

CriticizesComment from 22 Dec 2025 in “Microsoft will kill obsolete cipher that has wreaked decades of havoc”

“It's actually really good at what it is: a highly-available Kerberos implementation with an integrated directory server.”

RecommendsComment from 22 Dec 2025 in “Microsoft will kill obsolete cipher that has wreaked decades of havoc”

“There is still no equivalent alternative to AD.”

RecommendsComment from 17 Dec 2025 in “Pricing Changes for GitHub Actions”

“Active Directory is a very no-code tool and has a ton of documentation and certifications online”

RecommendsComment from 15 Dec 2025 in “Microsoft increases Office 365 and Microsoft 365 license prices”

“Active Directory was afflicted by impossibly tiny windows for the management tabs, but the functionality worked”

MixedComment from 9 Dec 2025 in “Microsoft has a problem: lack of demand for its AI products”

“I really like how AD works”

RecommendsComment from 28 Nov 2025 in “Can Dutch universities do without Microsoft?”

“Comparable, well integrated easy to use solutions didn't exist at the time.”

RecommendsComment from 24 Nov 2025 in “1M Downloads of Zorin OS 18”

“They bolted products onto Active Directory which is ancient LDAP tech.”

CriticizesComment from 18 Nov 2025 in “Windows 11 adds AI agent that runs in background with access to personal folders”

“Wait until it gets hacked. You will lose DNS, DHCP, Email, file servers, web servers, endpoints, etc.”

CriticizesComment from 4 Nov 2025 in “This week in 1988, Robert Morris unleashed his eponymous worm”

Counts come from 1,795,640 Hacker News comments, November 2025 to November 2026. How we count. Report a mistake.