Oh, what a nice thingy! I've just needed to scan my domain to make some overlook to the structure and the tool is just right. I also stumbled across a more serious tool called Enterprise Security Reporter from Scriptlogic www.scriptlogic.com/.../enterprisesecurityreporter . Seesh, the tool can provide over a hundred various security reports and other information about the computers in the domain! While it's overkill for the current task, I believe it will really help me with my quarterly reports I need to compile later this year. The standard reporting I am using now is pretty scant in detail, so issues tend to crop up where we need something a little more powerful. The difficulty is the complexity of the solution we are using currently. I usually leave it alone and do just a brief scan - but that's not necessarily thorough enough. I don’t want to make things even more complicated then we have now that the bunch of scripts we are using now… they always need tweaking and digging into their logs after the scan, formatting, extracting, etc. Pretty amazed with these Microsoft and Scriptlogic tools. I ran them both and bah, I have a Visio diagram with the domain and OU schema and a detailed report about which shares on my domain are exposed to everyone having the group Everyone in their ACL. If I told them how many issues I'm seeing, our higher-ups would probably fire me, so I'd better stay mum and do some more scanning with these tools.