LastLogonTime isn't really a good indicator of unused user accounts. The password age property is better. Do a search for computer account password age in the UDF forum. That UDF does a getobject on the computer account as a user to get the password age, just convert it to use user accounts instead of computer accounts. If you have further questions on it, please open a new post so we don't further hijack this thread.