Enumerating ACL for Domain Admins Group
Get-DomainObjectAcl -Identity "Domain Admins" -ResolveGUIDs
Finding ACLs where our user have All Rights
Find-InterestingDomainAcl -ResolveGUIDs | ?{$_.IdentityReferenceName -Like "Student422"}