AGES ago I had an app for Windows 2000 Server which was web based. It could managed active directory in ways which Win2K server wouldn't do, it also had a report tool for say users with what privileges, which users had never logged on, which ones had default passwords. Could also bulk manage accounts which Win2K can't for some stuff.
Now I can't remember what the heck it was, nor what it was called, so I am hoping someone here would be able to go, try this or it might be this. Some Googling has turned up nothing.