Managing single user accounts…

Hi guys, I know that when you follow the AD-OD Intergration docs you can manage users via group & computer lists but is it feasilbe to manage users induvidually too... other than via ADmitMAC? (I know WGM is can only READ the AD LDAPv3 directory but jus asking...) Also, what do you guys think of ADmitMAC? Anything I should look out for when testing?