Active Directory ACL Visualizer and Explorer - who's really Domain Admin? (Commerical versions available from NetSection) - View it on GitHub