The freeware RegDACl can query ACEs, list effective permissions of a group, and modify ACEs in the Windows NT 4.0 registry.

Unzip the RegDACLe.zip and copy all files to a folder in your path.

The help HTML help file is RegDACLe.htm. It explains the Discetionary Access Control List (DACL), provides program help, and examples.