Are there any free tools youd run yourselves to identify risks or misconfigurations in your AD - above and beyond AD best practices analyzer. Can you list what it is and what it does?
Also if you were to tender and go out to the market for for an AD healthcheck, what high areas would you ask them to cover? i.e. a top 5 issues for them to look at?