Hi I'm going to attempt to bring the AD setup at my company inline with the rest of the world. My proposal has been accepted and everything and everyone planned and nicely on board. My gift to them before I leave in August I guess One thing though. I need to find a tool that can give me info about groups. I.E. whether they're used or any info that could be useful for that matter. As my company migrated from netware years ago with little care for AD or its capabilities the structure is a mess and no-one really knows what many of the groups do. Groups have been created willy nilly seemingly with an ou for just about everything and everyone. Documentation only really kicked in when I came on board. The netware migration adds extra complexity as it appears that during the migration it took netware equivelant of OU's and turned them into groups with a $ in front. Never seen this before as I've never been in a netware environment We don't use Exchange which could have been a factor. Most of our other technologies such as dns are all linux driven. For this reason there has always been a sense that the MS stuff (AD included) was a necessary evil just for desktops and some server related stuff. Very messy Anyone else worked somewhere like this? Any advice?