Hi Guys,

We have been asked to do an internal risk assessment of our Active Directory deployment, which is comprised of three forests and spread across about 14 sites across the country. We're still running mostly on Windows Server 2003, and we have also delegated administration natively in Active Directory.

I was looking for pointers on what areas to go cover, and how to go about it in a systematic manner, and thought this might be a good place to start. If you have any experience in Active Directory risk assessments, I would appreciate any input you could provide.

Thank you in advance.

Regards,
John