I spent yesterday at the University of Iowa, attending a presentation on how to make OS X Macs work with Microsoft's ActiveDirectory. In short, it's hard. It shouldn't have to be this hard. Let's hope that Microsoft and/or Apple and/or some clever third party can make it a little easier for those of us who don't want to become LDAP architects just to have our machines share a common list of users.