Has anyone ran the active directory best practices analyzer tool? Is it useful? What kind of issues does it look for? Does it give a RISK per non complaince with best practice? Does it flag up major issues or pretty trivial ones? Are there any alternative tools to this looking at AD benchmarks or best practice configuration?