[tstenner]

Sure. But for smaller users it's easier to breathe the accounts by hand rather than manage an entire active directory installation.

[paulddraper]

RBAC and Active Directory are different things.