I discovered that there is a replacement to cacls called xcacls.vbs which can be downloaded from kb article 825751 which has instructions on how to use it. Not sure why there is a new version, but the output from the vbs script does look a lot nicer than cacls. Hopefully it doesn’t blow up permissions like cacls did for me once.