UIDs rather than Windows SIDs is my bugbear. Makes a whole mess when you introduce docker into the mix.