How does that help? Well, if LDAP or some other free-as-in-beer-and-speech directory service will allow your organization to control that level of access better than granting superuser/sudo privs to particular admins, who could in theory leave behind shadowed user accounts, that might be something worth looking into. I haven't been a NetWare admin in several years, and haven't followed their current progress with NDS, but I do recall that for a while there was a version of it that would sit on top of Linux/Unix as well as Windows and Mac workstations, and Linux/Unix and Windows servers, and could be managed from most of them as well.
<-- admits to being an Apple fanboy. I've hated Flash from the outset; nothing against Adobe
Apple's recent changes to drive lock-in, such as through the App Store, don't sit well with me, but I'll wait and see what the outcome is. Flash is a miserable piece of crap, and always has been. Forgive me for continually despising it, but I do loathe it so.