BTW you can also join liunx machines to the AD domain and enjoy the benefits of a single-sign-on; See the great work @fausp did on this: