To make life easier, i could look into adding the following functions into my Win32Admin.DLL ( http://home.comcast.net/~habullock/kix_solutions.htm ) to assist you.
LsaEnumerateAccountsWithUserRight($server, $privilege, \@sids)
Enums all accounts granted the SeNetworkLogonRight privilege on server \\testserver.
LsaEnumerateAccountRights($server, $sid, \@privileges)
Enumerates all privileges granted to the account testuser on server \\testserver.
