Thanks for sharing your insightful thoughts and suggestions – very helpful, and appreciated indeed.

On a related note, thought I’d let you know about a very cool new FREE tool called Gold Finger that we have become addicted to it, especially, finding out where all users have permissions in our Active Directory. (We came across it on ActiveDirSec.com.)

Gold Finger is an instantly deployable Microsoft endorsed Active Directory reporting tool that offers over 200 security reports (including powerful ACL analysis) for FREE.

It is developed by a Microsoft partner called Paramount Defenses Inc, and I believe was architected by the author of Microsoft’s delegation whitepaper.

DOWNLOAD LINK: You can download it from http://www.paramountdefenses.com/goldfinger.php.

We’ve been using it for the past two weeks now and love it! If you need a free way to generate AD security reports, you’ll certainly find it very helpful.

Best wishes,
Jonathan