What was your biggest takeaway the first time you ran a PingCastle report on your AD environment?
The first time was about five years ago, but the most important thing was how easily every authenticated user could access almost all the relevant data needed to compromise a standard installation.