Active Administrator

Active Administrator is an all-inclusive Active Directory management platform that provides the ability to secure, manage, maintain, audit and prevent problems across Active Directory and Group Policy environments from one cost-effective software solution.  Active Administrator now provides six powerful integrated Active Directory and Group Policy management areas within one integrated solution, including: centralised change control, auditing and reporting; backup and quick recovery; offline Group Policy editing and rollback; simplified delegation and enforcement of security; health assessment and monitoring; and proactive user and account maintenance to keep Active Directory operating efficiently and securely.

This is a common problem.  Native AD tools have the ability to establish delegated permissions, but no simple way to identify and report on those delegations.   Active Administrator makes it easy to find assigned permissions and generate reports to begin the cleanup process.  With Active Administrator you assign delegated permissions using Active Templates, which make it easy to track who can do what, and let you quickly revoke or edit delegations.  Active Templates are self-healing so if permissions accidentally get changed they are re-set to the intended state.