"Brian was just fired. We disabled his account. Can you tell me what he had permission to on all of the servers?"
No administrator likes to hear that question. You're certainly not going to be able to answer the question.
Here's another classic:
"Hey, those master project files? The ones we have living on one file server in each of our eight offices? We need to change the permissions on those so that the Interns user group doesn't have access anymore. When can you be finished with that?"
Face it, Windows permissions were easy to manage when you had one or two servers. Not so much with a dozen or a hundred. Microsoft knows it, too, and is furiously re-thinking the entire way that permissions are managed to try and address the problem. Of course, until they figure it out and get a fix in place, we're all stuck with the old way.