Powershell script to compare AD permissions.
Compare-Object -ReferenceObject (Get-AdPrincipalGroupMembership| select name | sort-object -Property name) -DifferenceObject (Get-AdPrincipalGroupMembership | select name | sort-object -Property name) -property name -passthru