I doubt one exists with the 'search and scour' abilities that you are implying. Since permissions like you describe will all be stored at the file level and not centrally, such a tool would have to be able to check every file and resource in your domain to compile such a list.
The only tools I know that come close to doing anything like that are tools for backups. The tool would also have to read the resource fork or alternate data stream to obtain user and group GUID/SID information, so it would need to have the basic functionality of a tool like SHOWACLS (NT Resource Kit) but filter by GUID/SID and not by permission assigned. You might take a look at SHOWACLS and see if it does what you want. Hope this helps.
ShackDaddy