I’m a long-time Samba fan, but even I wouldn’t run them as DCs in a production environment.

We still use on-prem Exchange with Microsoft Office at work, and it’s really becoming a problem. Microsoft already auto adds shortcuts for 365 (which we don’t use and doesn’t work with our setup), and the “Mail” app (which also doesn’t work with out setup), and now I have to explain to people to use the regularly titled Outlook icon and not the “Outlook (new)” icon (which again, won’t work with our setup).

That only allows DNS-based blocking of domains, which isn’t going to be nearly as effective. A lot of modern ads are served up from the same domain that you’re visiting. Browser-based ad-blocker extensions are in a position to block domains, URLs, and specific parts of the HTML DOM itself. This is going to sound rude, and I’m sorry in advance, but when people bring up pi hole, I assume they aren’t very knowledgeable about how things work.