http://www.analogduck.com/main/subinacl

There's the documentation for subinacl.

And here's a script that *might* do exactly what you are looking to do:

http://www.windowsitpro.com/Article/...504/41504.html

Good luck!