The AD support has been there for a while, sans the GPO desktop stuff. You could do dynamic DNS, full kerberos (including SSH SSO via Kerberos ticket), access c

The AD support has been there for a while, sans the GPO desktop stuff. You could do dynamic DNS, full kerberos (including SSH SSO via Kerberos ticket), access control / HBAC (via GPOs), sudoers via LDAP, even centrally tie SSH keys to LDAP users. Some environments mandate this stuff, and there's frankly no excuse for NOT supporting Kerberos / LDAP / centralized auth. The choice wasnt whether to support "stuff like this", but whether the support would be first class or second rate.