I have 2 enhancement requests:
1) Change the SEP user administration so that each user points to an entire domain (a pool of domain controllers), not a single specific domain controller. This is so that SEP can authenticate users against any available DC in the domain, not just a single DC, which could be different for each user, which is thus a single point of failure.
2) Change the SEP user administration so we can grant rights to AD groups rather than to specific users, thus enabling us to perform all of the user management in AD rather than in SEP, and enabling us to easily grant the same large groups of users the necessary permissions on multiple SEPM platforms without having to manually configure each user individually on each SEPM.
