NT security

Is there a utility or feature that allows you to determine what access a user has? For example what directories or files he has access to and associated permissions.

Thanks for your help