group3r helps you "...find vulnerabilities in AD Group Policy, but do it better than Grouper2 did."
group3r -c a.domain.ip.addy -d domain.com -s -f group3r.log