Active Directory is a lot more than just an LDAP though. You have GPOs, and Kerberos built-in. It can do Linux and Unix authentication too and some more. Personally it’s one of the few Microsoft products I have a lot of respect for.