What's the pros/cons of doing Group Policies (we have AD and the
workstations login to eDir and AD) of using ZEN as opposed to AD?

Is one better than the other to administer, set them up?

Granted, we don't usually use the MMC for AD because we have IDM 2, so
we really never have to touch the AD side of things.