Active Directory. It is a security mess. It is what you get for trying to be backwards compatible with so many older generations and build on top of it creating a complex nightmare.