There have been a lot of questions on the list lately about Active Directory. This SecurityFocus article might be able to answer some general questions people are asking.
http://online.securityfocus.com/infocus/1563