The fact that MS platform management separates user capabilities (profiles) from platform capabilities (applications, installed and managed per-host) results in some particularly painful characteristics.

This is where the ability to have automatically configured (puppet / chef / ansible / cfengine) clusters of servers for 'Nix hosts, or NFS-mounted /usr, so much more powerful.