AD Permissions Tool Similar To Gold Finger?

I'm in an AD environment that has been worked on by several consultants and coworkers over the years. We have multiple forests that we support and standardization is something we're working towards. I need to discover things like:

• Who has the ability to change user passwords in each domain?
• Which users can they change passwords for? (ex: Can the interns change student, teacher, and/or administrative user passwords? Can teachers change student passwords?)

I know it'll branch into more questions about OU permissions, group permissions and others as we clean all this up. I'm currently demoing Gold Finger and while it's easy to use and looks like exactly what need, but the price is insane with a public education budget. I'm also looking at the tools that the awesome CJWDEV has for us to use, which is priced a lot better for us.

Does anyone have anything else I can look into or have PowerShell methods that I haven't noticed yet so I can cobble it together myself?