About the window domain users and groups: I think that everything that is built into the operating system is probably something that the user would expect to find good support for. While I can easily agree about curl and the other code that has been mentioned, being able to access domain users and groups is (imho) really important and a reasonable expectation from an enterprise user