Actually it is possible to recertifiy AD groups and folder permissions. It would be also useful to get the chance to recertify user objects
As long as you are scanning the proper users OU, you can recertify the user objects.
no; it's not; I would be happy if you can show me