File/User Permissions/Security Monitoring Tool

Hi All...

I need a some sort of security monitoring tool that can be used to display permissions and the like for file/users/groups etc. For example, I need to be able to easily check/maintain what persmissions a selected user has, what groups they belong to etc or check/maintain who (both the group and the actual users in that group) has access to a selected file. Extra functionality would also be good such as auditing changes to groups etc.

If anyone knows of any products or has any reccommendations, I would highly appreciate it.

Btw all this is to compatiable with windows server 2003, Active Directory etc.

Thanks in advance

Dave