Great article. I have been pushing the use of AD groups and schemas for years for adminstration purposes. Unfortunately, many do not want to take the time to set it up correctly. Now I will just send this article to explain the benefits of using a schema-based security model.