Hey Kent - try this one - I was just writing this up to give mvdw a head start on his project. It lists all users in your domain whos password is set to "never expire":

code:

BREAK ON

$ADS_UF_DONTEXPIREPASSWD = 65536

$DOMAIN = GETOBJECT("WinNT://@LDOMAIN")

?
?"USERS WITH 'PASSWORD NEVER EXPIRES' IN @LDOMAIN:"
?

$DOMAIN.FILTER = USER,""

FOR EACH $USER IN $DOMAIN

$USER.GETINFO()

IF $USER.USERFLAGS & $ADS_UF_DONTEXPIREPASSWD
? $USER.NAME
ENDIF

NEXT

$DOMAIN=0

EXIT


-Shawn

I'll never give-up selling folks on the beauty and power of ADSI ..