The biggest thing I need to do is Audit complience with a standard. I can theoretically check it against our standard in the code and report just non-compliance, but I need documentation that it is complient as well. So I will most likely report it out saying the string that is returned as well as a field saying 'complient' as 'yes/no'.

So basicly I will be:
1) getting a list of machines on the domain
2) enterateing through that list to check each right on each machine.
3) compare that right to a 'standard' (this step MAY involve resolving SIDs). Set the variable reporting complience.
4) Save the report out. Dont know what format I am going to prefer here yet, excel or flat-text.

I must admit that I am not as brushed up on my ADSI as I should be. Could you give me an example of an ADSI Query that would return the machines in a specific OU (my OU is 4 layers from the root).

I would rather the script remotely get the information if possible. If I cant then I will most likely launch it using a schedule and 'last ran' indicator in the machines registry as I do this quarterly.