hybrid AD tools

Start with the administration task and approved Microsoft tooling; verify permissions and support before running third-party scripts in a directory environment.