Export ACLs on Active Directory objects in a CSV format. It supports the following features
Export only explicitly assigned ACLs
Export ACLs on descendant objects
Search within ACLs for a specific identity. Where does "Domain\Some Admin" have explicit access?
Choose to show either DACLs or SACLs or both.
Apply a search filter to the descendant object to return. i.e. "(objectCategory=computer)"
Compare the explicit ACLs to the defaultSecurityDescriptor and indicate if an ACE is additional or missing.