tool to show what security group has permissions to what

I'm after a tool,free of course . That shows what Security Permissions in AD have access to what share.

Trying to tidy up the security groups as over the years it become a mess and with out looking at every share to find out what has what.

Cheers