I have a small problem - I need to query the Logon Hours for all users in the domain and reset those ones that have been changed (and generate a security warning).

Unfortunately, I am NT4 only so do not have access to the domain via LDAP. I therefore need to use the WinNT provider. I am using NT4 Workstation with the ADSI client installed. I can enumerate the users OK, but am having trouble getting the LogonHours property. Is it LogonHours? Is there a way to enumerate all of the properties that are available for any given object?

At the moment the Security team are using User Manager to group select all users in the domain and setting the logon hours to what they should be. This send the domain controllers (and network links) into a tailspin as they try to replicate 9000+ user accounts!! Anything wuold be better than this - any suggestions?

Thanks,
Michael.