One of the most useful tools in my toolset is AzMan, the Microsoft Authorization Manager.
It can be used to set or change permissions and configurations at a high level, including making several changes simultaneously. It performs some of the same functions as other familiar tools, such as the ACL Editor and Delegation of Control Wizard (for user roles) and the Configure Your Server Wizard (for computer roles). However, Authorization Manager gives you more control and lets you go farther than these tools.
You can create a custom MMC and add the Authorization Manager snap-in, or you can open the predefined Authorization Manager console by typing azman.msc at the command prompt or Run box.
As AzMan is also included in the Microsoft Enterprise Library Security Application Block, it becomes very easy to integrate in your own applications.