I&#x27;ve been crucified in irc for suggesting moving away from samba and towards using chef&#x2F;puppet&#x2F;ansible&#x2F;salt to manage windows user accounts (if coupled with pxe booting for dynamic image loading on user machines...) I still like the idea. OpenLDAP, etc also aren&#x27;t cutting it to me... but don&#x27;t confuse me misunderstanding the current importance of AD lock-in and the man&#x2F;mind-hours needed to transition away from it.