Hi, use the "oldcmp" free tool from the excellent Joe's web site at: http://www.joeware.net/win/free/tools/oldcmp.htm I've never tried it because i have w2k3 domain and I used the "saved query" fonction in ADUC that does the job. :-) i think u can use the following switch: oldcmp -f "(&(objectCategory=person)(objectClass=user)(userAccountControl:1.2.840.113556.1.4.803:=2))" Hope it helps. Yann