function  EnumFolders($tld, $parent, $parentlog)
{	
	if ($tld -is [System.IO.DirectoryInfo])
	{
		$a = New-Object -ComObject Scripting.FileSystemObject
		$acl = get-acl -Path $tld.fullname
		$folder=$tld.fullname -replace "\\|:","-" 
		
		$filenamelog = $logfolder +"\ACL_Log_$folder.xml"				
		write-output '<?xml version="1.0" encoding="ISO-8859-1" ?>' | out-file -filepath $filenamelog -enc ascii
		write-output '<?xml-stylesheet type="text/xsl" href=".\Template_ACL.XSL"?>' | out-file -filepath $filenamelog -enc ascii -append
		write-output "<FILESYSTEM>"| out-file -filepath $filenamelog -enc ascii -append

		if ($parent -ne $null)
		{
			$row=("<PARENT><LINK HREF="+'"'+($parentlog  -replace '&','&amp;') +'"'+ " DESC="+'"'+($parent -replace '&','&amp;')+'"'+" /></PARENT>")
			write-output $row | out-file $filenamelog -append -encoding ASCII -Width 4096
		}			
		
		write-output "<FOLDER>" | out-file $filenamelog -append -encoding ASCII -Width 4096
		$row="<NAME>"+($tld.fullname -replace '&','&amp;')+"</NAME>"
		write-output $row | out-file $filenamelog -append -encoding ASCII -Width 4096
		
		$row=$acl.accesstostring.split("`n") | foreach-object { $matches=$Null; if ($_ -match '(?<P1>DOMAIN_NAME\w*)\\(?<P2>GROUPS_PREFIX\w+)\s+(?<P3>Allow|Deny)\s+(?<P4>[\w+\,+\s]*)'){"<ACCESS><DOMAIN>"+$matches.P1+"</DOMAIN>"+"`t"+"<GROUP>"+$matches.P2+"</GROUP>"+"`t"+"<TYPE>"+$matches.P3+"</TYPE>"+"`t"+"<PERMISSIONS>"+$matches.P4+"</PERMISSIONS></ACCESS>"}}
		
		$row="<ACL>"+($row  -replace '&','&amp;')+"</ACL>"
		write-output $row | out-file $filenamelog -append -encoding ASCII -Width 4096
		write-output "</FOLDER>" | out-file $filenamelog -append -encoding ASCII -Width 4096
        foreach ($subfolder in (get-childitem -Path $tld.fullname | where{$_.PSIsContainer}|Sort-Object -property Name))
		{
			$FullName = $a.getfolder($subfolder.fullname).shortpath
			$acl = get-acl -Path $FullName
			$accessRules = $acl.GetAccessRules($true, $true, [System.Security.Principal.NTAccount])
			foreach ($accessrule in $accessRules)
			{
				if ($accessrule.IsInherited) {$Eredita=$true}
			}

			if (-not $Eredita) 
			{					
				EnumFolders $subfolder $tld.fullname $filenamelog
			}
			$boh1=$logfolder+"\ACL_Log_"+($subfolder.fullname -replace "\\|:","-" )+".xml"
			#$boh1
			if (test-path $boh1)
			{
				$row=("<CHILDREN><LINK HREF="+'"'+($boh1  -replace '&','&amp;')+'"'+" DESC="+'"'+($subfolder.fullname -replace '&','&amp;')+'"'+" /></CHILDREN>") 
				write-output $row | out-file $filenamelog -append -encoding ASCII -Width 4096
			}	
		}
		write-output "</FILESYSTEM>" | out-file -filepath $filenamelog -enc ascii -append
	}
}
	
$logfolder="."
$path=read-host "Please enter the path to scan: "

Enumfolders (Get-Item $path) $null $null