Something that would be useful would be a way to identify user profiles on a machine that no longer exists in AD, so they can be deleted from the machines. If a user has been terminated, and has logged into multiple machines we have no easy method...