[marcosdumay]

> For large organizations, domain controls make managing a large number of desktops much easier.

The Unix way of putting the resources on the network, and synchronizing /etc works quite well. I've never seen anybody actually claim that AD is better than it. Most people complaining that the unixes don't have administration tools just want them to work like Windows.

Windows is a hell to administer, you can't just clone machines and you can't centralize your resources. You must do what AD allows you, and beg that this time something won't break, because you can't really test anything.