It's common for companies to use Active Directory security groups to permission people in SharePoint. Some companies nest Active Directory groups within Active Direcotry groups. Under these circumstances it is extremely difficult to manually perform security audits on securable objects to determine which users actually have permissions to the object in question. DeliverPoint solves this common challenge within seconds, by breaking down Active Directory group membership (and SharePoint group membership) and returning to you a list of all users permissioned to the securable object.  In addition to this, you can easily understand how the user was permissioned by viewing a detailed hierarchy of the groups used to permission the user to the object.