AD is all about group policy, logins are merely table stakes. If you want to distribute firewall rules to every machine in your arg AD is the way to go. Ditto for forcing updates (or preventing them), and any other manner of mass configuration. Then there is also centralized logging and auditing.

Linux has most of this in an ad-hoc fashion, but the key benefit comes from the centralization.