cacls and xcacls is pretty lame when you have lots of groups and tons of subfolders. I'd like to be able to send the owner of the folder an easy to read report (remembering the folder owners are mostly non technical and BUILTIN\Administrators Full Control [ALL] doesn't mean too much to them), so they can determine if the access is appropriate. Obviously, over time as peole change job responsibilities and what not people end up with many more permissions then they require.
I have seen a demo from a vendor called Varonis and the tools looked pretty good. Wondering what other people out there are doing or have experienced. Especially any open source tools out there