The freeware RegDACl can query ACEs, list effective permissions of a group, and modify ACEs in the Windows NT 4.0 registry.
Unzip the RegDACLe.zip and copy all files to a folder in your path.
The help HTML help file is RegDACLe.htm. It explains the
Discetionary Access Control List (DACL), provides program help, and examples.