AD is much worse than IE6, but unless you're doing ops work that has to deal with it you probably wouldn't realize this.

MS broke or eliminated other authentication modes from Windows, so companies were forced to use AD (with the associated DNS and other infrastructure).

12 years after introduction, there are no stable/viable alternatives. Competition really was exterminated in this case.