the Microsoft employee Robin Granberg write a Powershell Script to report the ACL in AD. If you run this script, a GUI will pop up and you can run ACL reports in your domain. I think it will save time and is very helpful to make a good documentation about permissions in AD. It´s very easy to handle and have nice features.
[Take Control Over AD Permissions and the AD ACL Scanner Tool - Platform PFE's in Sweden Blog - Site Home - TechNet Blogs]
http://blogs.technet.com/b/pfesweplat/archive/2013/05/13/permissions-in-ad-lost-control.aspx
