AD for settings is a very poor replacement for what puppet or ansible enable on Unixoids. That's true, but Puppet and Ansible aren't meant for end user device

AD for settings is a very poor replacement for what puppet or ansible enable on Unixoids. That's true, but Puppet and Ansible aren't meant for end user device management. They're primarily for deploying/running services. AD is the opposite, it's strong in end user scenarios and weak for running services.