accounts rights in Windows server 2003

[zon123]

Hi,
We are due for an IT audit and my boss wants to know exactly what each account has access to. I have found descriptions online on enterprise admins, domain admins, backup operators, power users e.t.c, but I can not find anything detailed on exactly what rights an entrprise administrator has / detailed description on exactly what this account can do.
Where can i find this information.

 

[WhoKilledKenny]

I continue to use a program called DumpSec (Dump Security).
Sill a Free Utility

http://www.systemtools.com/free.htm

Dump security for:
Files Systems
Registries
Printers
Shares
Domain Policies
Local and Domain User Rights

I save reports as .csv and edit them in Excel.