Hi there,
some more reports regarding the active directoy would nice.
- Overview of user/group permissions,
- Where is delegate set?
- etc., just like the reports on filesystem permissions
Yes, possibly base a report on any place in AD where permissions are not inherited.