Untitled

Enumerating ACL for Domain Admins Group

Get-DomainObjectAcl -Identity "Domain Admins" -ResolveGUIDs

Untitled

Finding ACLs where our user have All Rights

Find-InterestingDomainAcl -ResolveGUIDs | ?{$_.IdentityReferenceName -Like "Student422"}