Searching for directory access rule violations