Active Directory ACL Analyzer is an audit tool designed to help IT personnel view, sort, and analyze access control lists (ACLs) that protect Active Directory objects. It was developed by a former Microsoft Program Manager for Active Directory Security. The tool automates the retrieval and display of the ACL for any Active Directory object, presenting a fully sortable, detailed view with individual columns for permission, type, and inheritance fields. It also supports analysis of System Access Control Lists (SACLs), which govern auditing behavior in Active Directory. Key capabilities include: - Viewing and analyzing ACLs on any AD object (e.g., domain root, Domain Admins group, OUs, user accounts) - Identifying object ownership and the number of Access Control Entries (ACEs) in an ACL - Sorting permissions individually by column (e.g., explicit vs. inherited, allow vs. deny) - Viewing and exporting both ACLs and SACLs to CSV - Real-time ACL analysis, allowing comparison before and after changes The tool runs on any Windows computer and does not require administrative privileges, agents, or services to operate. It is licensed on a subscription basis (monthly, quarterly, or annual), with a free version available for download.