Windows 2000 Security

In novell 3.11 there was a tool called security that when run, gave a listing of user accounts that had security violations. It would list supervisor equivalent accounts. Accounts that had no passwords, etc. I have a need to audit a windows 2000 domain and find which user accounts have permissions beyond what a normal user shouls have. I have looked at microsoft's secedit, which seems to work off of policies. Is there any tool that when run will list all users in the domain and what rightsthey have???

Thanksssss Much!