Active Directory ACL Exporter is an audit tool designed to automate the retrieval and export of Access Control Lists (ACLs) from Microsoft Active Directory environments. It was developed by a former Microsoft Program Manager for Active Directory Security. The tool supports exporting both DACLs (Discretionary Access Control Lists) and SACLs (System Access Control Lists), covering domain-wide and OU-wide scopes. Users can further customize the export scope using configurable LDAP filters. Exported ACLs are structured with individual permissions presented in unique columns, making them suitable for security permissions analysis, compliance auditing, archiving, and comparison purposes. Key operational characteristics: - No administrative privileges are required to run the tool - No agents or services need to be installed - Runs on any Windows computer - Exports can be triggered with a single button click The tool is licensed on a subscription basis (monthly, quarterly, or annual) and also offers a free downloadable version.