Using ntfsacl.exe assumes to understand the NTFS Security Model. Version 1.0.2.2 is redesigned for © Windows 7 (and XP) to read NTFS-ACL entries from a directory tree. The standard output uses SDDL. With the /t switch some of the SDDL abbreviations are converted in text strings.

NTFSACL 1.0.2.2 (c) 2010 Coopware
      Usage:
        ntfsacl path /readacl [/s] [/t] [/f] [/l:logfile] [> output-file]
                     /readacl ... reads ACL's from path
                     /s ......... scans subdirectories in path
                     /t ......... converts some SDDL to text
                     /f ......... shows also file ACL's
        ntfsacl /show ........... shows NTFS Terms

Prompt: ntfsacl C: /readacl /t >c:\tmp\C.txt

Output:
      C:	Owner: TrustedInstaller	Group: TrustedInstaller
      	A		FA	TrustedInstaller
      	A	CIIO	GA	TrustedInstaller
      	A		0x1301bf	LOCAL_SYSTEM
      	A	OICIIO	GA	LOCAL_SYSTEM
      	A		0x1301bf	BUILTIN_ADMINISTRATORS
      	A	OICIIO	GA	BUILTIN_ADMINISTRATORS
      	A		0x1200a9	BUILTIN_USERS
      	A	OICIIO	GXGR	BUILTIN_USERS
      	A	OICIIO	GA	CREATOR_OWNER