NTFS Permissions audit

Can anyone recommend any apps for auditing NTFS permissions ?

Specifically, I'll like to be able produce a report showing

What access User1 has
What permissions have been set for a folder and subfolders.
Who has greater then Read permissions for a folder

I'd really like to be able to grant access to a user/group with an expiry date, is anyone doing this ?

I could probably use vbscript, showacls, xcacls and cobble something together, but I just don’t have the time, and I'd prefer something slicker.

Thanks

These two cover most of my needs:

• AccessEnum
• DumpSec

Let me know how those work.

(I'll consult google to try to remember some of the others I've used.)

On a side note, here is a good referece on what NTFS is, how it works, and tools to use with NTFS files.

Those paranoid about security might appreciate this page dealing with NTFS auditing. From the page:

# Go to Windows NT's Command Interpreter (type cmd at the Run prompt)
# Switch to a partition that is NTFS.
# Type the following:
echo This is what you'll see >> stream.txt [Press Enter]
echo This is what you won't see >> stream.txt:hiddenStream [Press Enter]
# Now, open the file up in Notepad
# Go to the NT Command Interpreter.
# Type the following:
more < stream.txt:hiddenStream
# And viola! There is your hidden stream

One has to wonder if/when virus writers will take advantage of that.