I need client relevance to check what permissions are assigned to Administrators for C:\Windows folder:
You could do something like this to interrogate the permission types and then list them in a viewable format for each user. I had a similar use case recently and found the snippet below in this thread. Hopefully it will help you out too. https://forum.bigfix.com/t/list-permissions-for-a-list-of-folders-in-a-text/30113/2?u=jstev
(account name of trustee of it & " - " & (if (generic all permission of it) then “Full Control” else “”) & (if (generic read permission of it) then “Read” else “”) & (if (generic write permission of it) then “Write” else “”) ) of entries whose (generic all permission of it OR generic read permission of it OR generic write permission of it) of dacl of security descriptor of folder “C:\Windows”