Hello Mike!
AFAIK, there is no _one_ application/command that will do EXACTLY what u want here.Which means that u'll probably have to combine the use of several programs, each performing one particular desired function, in some sort of a custom script. In Win2000 Resource Kit u can find several proggies u might find useful-there is the Enumprop.exe, which dumps all the properties of an AD object in a standard output ,Findgrp.exe, which gets users' direct and indirect groups memberships,Global.exe and Local.exe, which list the contents of all Global and Local groups respectively across all the domains and workstations, Showgrps.exe, which lists all the groups to which a user belongs, Showmbrs.exe ,which shows the list of members of a particular group,Showpriv.exe which lists the users/groups that have a particular privilege on a local box etc. I don't remember all the contents of the RK ,but I am sure u'll find the right combination there.
HTH
Good luck.
Talli