The entire ecosystem is designed- by-committee bullshit. I swear it's intentionally arcane and complex to sell certs.
There was a design-principle that software ended up being a model of the organisation that built it, and the different departments of MS HATE each other... :D
@BillySmith This reminds me of the amount of time a company I've worked at has brought some clunky piece of shit product and have persuaded themselves that it is the way we work that is wrong; the app is the right way.
@BillySmith For example we all got borged into the main helpdesk software at work (We had our own we paid for) and it's total, total shit.
The AD is out of our control, so you get bonkers things happening like the built-in admin account getting disabled via GPO, so you can't add yourself to the admin group on the server, and have to ask someone else to do it, FML