SAMIT: The False Risk of Active Directory