Windows Server - Active directory: Need to clean up Active Directory

Hi,

Experiencing inappropriate use of active directory security and distribution groups and need a solution on how to audit theses groups and reconstitute them according to best practices. are there any tools that can help, so i can compare them? Any links to best practice for AD groups will help.

Secondly, there are just too many group policies and I need some consolidation of some sort. Are there alternative application delivery methods in the market that I could use?

Your help is deeply appreciated.

Thank you.