User Access Audit

Do any of you perform a User Access Audit on the systems your CU uses, even if you have a third party audit Windows Active Directory (which looks at security permissions, folder access, server access)?

Thanks!