Discover
Scout, Meridian's capture tool, walks your estate read-only with zero network egress: every Group Policy object, every application, every setting, plus a register of anything deliberately skipped. Discovery you can hand to an auditor, not a best guess.