The Active Directory Permissions Analysis Challenge
Analyzing permissions in Active Directory is a quite difficult task for Active Directory administrators. First, because the Active Directory delegation capabilities are extremely powerful and could lead to highly complex hierarchy which is then hard to check. Second, because the built-in tools are limited: The permissions are displayed in the properties of each object, the