Been down this road and tried a few different products myself. The only one I found that didn't give me erroneous information was AD Janitor by Specops. http://www.specopssoft.com/products/adjanitor/ _____ From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On Behalf Of Mike Johnston Sent: 25 June 2008 03:29 To: gptalk@xxxxxxxxxxxxx Subject: [gptalk] Finding active users Howdy all... Our domain has kind of gotten out of control with users coming and going and I'd like to get control of it. What is the best way to build a list of current active users on my Windows 2003 domain? We have many that haven't logged in for over 6 months so there accounts are sitting and waiting for a password change. Is there a way (or a script) that print out last long on or which accounts are waiting for a password change? We don't expire our accounts, just the password. Any help would be great!