If you're looking for 'easy' you're in the wrong biz.
The only other way to do it is with data mining. You catch every user in their logon script to write @SID and @UserID out to an INI file and then mine it out from the INI with your admin script. Unfortunately lyou would only catch those that actually run the logon script. Not an elegant solution and on further thought, not any easier either.
Perhaps a career change?
_________________________
Give a man a fish and he will be back for more. Slap him with a fish and he will go away forever.
