Our environment is best suited to keeping every machine as far from each other as possible. It prevents a lot of potential errors from happening.
There is only one thing shared on our network and it has its own system of managing the data.
I would go a completely different route if I had larger scale systems deployment. That means, no Windows OS.
I always thought Active Directory was more for the lazy IT guy who really did not want to work for a living. The deployments of it I have witnessed are atrocious. I understand there are those who think that is the only way to do things. Then again, some people are limited in their creative abilities as well.
