https://msdn.microsoft.com/en-us/openspecifications/default

Their kerberos implementation works with heimdal and mit. They used an optinal field to include group membership data so that authorization decisions could be made from the contents of the ticket.

https://msdn.microsoft.com/en-us/library/gg604662.aspx

I'm just saying. Times have changed. Will they ever be as open as an open source project run by volunteers? No. Have they dramatically improved their position in response to the very real criticisms of their past behavior. Yes.