Three AD Tasks You Should Leave To Your Users