I just found out that one of the desktop support guys has the ability to create OU's! After looking at his account i can't see any groups that would give him this ability. I must be missing something. What is the quickest way to determine what permissions a group has?