Active Directory (AD) is often the heart of enterprise identity—serving authentication, authorization, and policy enforcement…