So counter point. Active directory is a god send for managing endpoints, user accounts, endpoints, etc.
No you don't let windows act as a dns server outside the ad subdomain, no you don't use windows to admin your root private ca, and for all you hold dear do not enable that God forsaken web server. But for what it does well, it's the best solution out there.
I'm playing through it, and my house mate described it as a love letter to Chrono Trigger.
Also it's gorgeous. Play it just for the eye candy if nothing else.