global group rights

I’m taking over a net admin position for an NT network, and trying to clean up the existing users and groups. There are a number of groups that don’t seem to have rights to anything that I can see, but is there a tool or a way to verify what rightsa given group has?