I've always thought of the Active Directory (AD DS) as a box of Legos: give any two kids an identical set and they will come up with something completely different.  Good from a design and flexibility standpoint, but challenging if you implement a design and later the requirements change and/or new features are added to AD DS; a design overhaul...