AD administrators that use 3rd party tools to accomplish these tasks that are easily done with LDAP queries does not make them lazy. It makes/keeps them incompetent. What is a person doing in the role of an AD administrator if they do not know how to query active directory using LDAP commands and rely on 3rd party apps to do it for them? Obviously they failed the Microsoft exams related to Active Directory. As an AD administrator myself who has never relied on 3rd party tools to achieve these normal tasks for an AD Admin, it frustrates me to see those in the field using these tools to make up for their incompetence and lack of abilities. So when these AD administrators who rely on all these 3rd party tools to perform their AD tasks run into a real problem with AD and have to actually do some troubleshooting, what do they do? They have no clue what is happening "behind the scenes" and how AD works beings they've never been exposed to queries and actually working with the back end of AD. Or is there a 3rd party tool you sell for that too???