I second this notion. I realize that it uses the Microsoft Management Console, but it's a real pain to try to set security rights for users when you can't see the entire list of fields in a template. Nor is there any way, that I've been able to discern, to copy the rights from one user and apply them to another.