Graphic Tool to View AD ACLs

Q: Is there a graphic tool to view ACLs of users in Active Directory?

A: There are several ways to view ACLs on resources. For example, you can view effective permissions through Windows Explorer. However, the best tool for viewing and even creating reports for ACLs in Active Directory is a free tool called AD ACL Scanner. This tool is actually a PowerShell script. After you download the script, execute it to display the graphical interface. Select the OU/object, then select the options required for the scan and the output format, which can be HTML or CSV.