This command-line tool dumps all properties set on any directory service object. Using EnumProp, you can display the security descriptor or list only a given set of attributes for an object.
EnumProp also recognizes globally unique identifiers (GUIDs) (objectGUID and schemaGUID) and security identifiers (SIDs). It then displays those properties accordingly.
EnumProp Topics
File Required