Joined a company with a 10-year-old Active Directory environment and almost no security controls—how should I handle it? : r/WindowsServer