Time? You just set it to scan every host on your Active Directory. It’s like a ten minute setup and spits out a report when you’re done.
Yeah, you’re definitely the guy they hate but don’t get paid enough to fight. Security risks users are usually too much of a pain to deal with so we just tell our supervisors that you’ll end up ransomware’ing the company one day and let them handle it from there if they care enough.