Use PowerShell to Show User Rights Assignments Set by Group Policy
Here's one I came across whilst performing some Group Policy troubleshooting...
Get-CimInstance -Query "Select * from RSOP_UserPrivilegeRight where precedence=1" -Namespace root\rsop\computer |
Select-Object UserRight,AccountList
It shows the UserRight set by Group Policy and who has it.