Sorry, I don't want to defend what they did with breaking compatibility with any product other than their own (IE, AD, Office, IIS killed Corel, Netscape... and so many other companies). I just don't see AD as a terrible standalone product. But you're right, I don't have a deep understanding of its shortcomings vs, say, OpenLDAP (though I'd love to learn something!).