There is a free tool called dumpsec from Somarsoft that you can use to dump
group membership as a column or table for quick reports. You can also use
it on remote computers assuming you smb connectivity to the remote computer.
The AD command line tools such as dsquery and dsget also can give you a lot
of information about groups including nested information. They are not
available for Windows 2000 but can be used for the domain if you have an XP
Pro admin workstation in the domain with adminpak for Windows 2003 installed
which is a free tool from Microsoft. More advanced tools like LanGuard [not
free but free to try with a time limited version] can scan a whole domain
to report on details including group memberships. --- Steve
