I have often seen folks looking for code snippets to extract ACL's from AD. I have recently uploaded an example that can traverse from a defined point. Code is located in the Script Repository.
http://gallery.technet.microsoft.com/scriptcenter/DUMP-ACLs-From-an-OU-8e2da85c
--Paul Bergson
MVP - Directory Services
MCITP: Enterprise Administrator
MCTS, MCT, MCSE, MCSA, Security+, BS CSci
2008, Vista, 2003, 2000 (Early Achiever), NT4
http://www.pbbergs.com Twitter @pbbergs
http://blogs.dirteam.com/blogs/paulbergson
Please no e-mails, any questions should be posted in the NewsGroup. This posting is provided "AS IS" with no warranties, and confers no rights.