I'm looking forward to the day when we can generate a settings report that looks like the traditional RSoP, that gives us the policy path information, and the name of the Configuration Profile, or Security Baseline policy that the setting is being managed from. This is critical in debugging.