Finally! This is the way Apple has done it forever and it is sooo much nicer from a user experience perspective.
From a user perspective, it's awful when you just want something that works and nobody can help you.
I still haven't figured out why Sierra users get "Authentication failed" when I see "opendirectoryd: ODNodeCreateWithNameAndOptions completed" in the logs and get errors like "opendirectoryd: ODNodeCustomCall failed with error 'Invalid credentials' (5000)" with no actual logging of the event happening on a fresh, new AD server (made just for testing this scenario). I even had Wireshark inspecting all the traffic from the Mac to try to determine what the issue is, no wrong DNS lookups, or connections to the wrong server etc.
>5 hour patch installs on a freshly Windows is *not* acceptable
Weird, updates are supposed to be automatically installed when installing Windows; which are significantly faster than doing it after Windows is installed.