Genuine question: Why would you have Windows servers joined in an AD domain? Or are you talking about pushing changes to workstations?
I am dying for the chef/puppet/salt/ansible/cfengine recipe that will let me fully configure this stuff, including the domain memberships.