Bigfix can do what Active Directory can?

(imported topic written by SystemAdmin)

Hello,

I am just wondering whether Bigfix can do all those things which active directory can do like restricting a particular user to change time of a particular machine or restricting a particular user to install any particular software on a particular machine, e.t.c ?