Obstacles and threats organizations face when protecting AD