http://www.active-directory-security.com/2018/06/windows-server-2016-active-directory-security-permissions-acl-dump.html