EMCACL (a tool similar to CACLS or SUBINACL) will allow you to print the ACLs in a series of directories for review.

Mount the CIFS path to a local directory (say, Z:\) and basically, you're looking at syntax like:

EMCACL Z:\*.* /T

This will display all the ACLs on all files, folders and subdirectories.  You can redirect the output to a text file from there.  The output isn't Excel friendly, however, as it's pure text.  You'll results like this:

EMCACL 02.02

    Copyright (C) 2009, All Rights Reserved,

    by EMC Corporation, Hopkinton MA.

Server                      : CELERRA_CIFS_SE 5.0 EMC-SNAS:T7.1.45.6

Client OS                  : Microsoft Windows Seven Enterprise Edition, 32-bit Service Pack 1 (build 7601)

\\celerra_test\shared\Accounting\

SD control      : 0x9c04

DACL is        : auto-inherited protected

SACL is        :auto-inherited

Owner          : BUILTIN\Administrators

Group          : CORP\Domain Users

DACL count      : 11

  CORP\Non_employees: Denied  SPEC:POD    (0x000F01FF) Flags:OI,CI (0x03)

  BUILTIN\Administrators: Allowed FULL:EWXPOD (0x001F01FF) Flags:OI,CI (0x03)

  CORP\domain admins : Allowed FULL:EWXPOD (0x001F01FF) Flags:OI,CI (0x03)

  CORP\Role_Access_Users: Allowed CHGE:EWXPD  (0x001701BF) Flags:OI,CI (0x03)

  CORP\CORES: Allowed FULL:EWXPOD (0x001F01FF) Flags:OI,CI (0x03)

  CORP\CORES RO: Allowed READ:EX    (0x001200A9) Flags:OI,CI (0x03)

  CORP\CORES_MRI Tech Schedule: Allowed READ:EX    (0x001200A9) Flags:OI,CI (0x03)

  CORP\CORES_MRI Tech Schedule_RO: Allowed READ:EX    (0x001200A9) Flags:OI,CI (0x03)

  CORP\DEPO_MRI_PROT: Allowed READ:EX    (0x001200A9) Flags:OI,CI (0x03)

  CORP\DEPO_RPT_MAC: Allowed SPEC:E      (0x00120089)

  CORP\SEC_ADMIN    : Allowed FULL:EWXPOD (0x001F01FF) Flags:OI,CI (0x03)

Directories found: 1

But with a little work at the command line with PERL or awk, you can format the output any way you wish.

If parsing the output at the command line isn't your strong suit, you're looking at buying a commercial piece of software to report on the ACLs.

Let us know if that helps!

Karl

and if you or your customer has deep pockets, you can get this tool

http://www.quest.com/security-explorer/

Try using beyondcompare. Seems inexpensive (relatively) for a single user license.

BeyondCompare doesnt compare acls.