A poorly understood Active Directory environment makes daily operations harder to trust. In practice, this can look like new ...