Identifying group priviledges

I just assumed responsibility for a NT4 network after the previous person left (no turnover, no documentation). I need to try to tighten security, but I have no idea of what each group now on the system can access. Are there utilities in NT 4 thatcan flow chart or map this info, or are there 3rd party utilities that will do it?