I have one idea to make Microsoft products easier to use and more efficient to audit. Microsoft should change per resource security system to per person security system. It mean that User can add security list via separate security console. Auditor can easily know who have what permission. Administrator can easily control network resources and users. It’s only an idea that I hope.
Let me know that it’s good or not.