Howard and Chris,

I'm sorry, but I was not thinking correctly about this for our case. The Password Age alone would not be a good check. We have too many accounts that have NEVER EXPIRE set on them. I would need to use the LAST LOGON which is stored on PDC and each BDC. To make a determination of what to do with the user account. I could use the Password Age for the machine account though.

[ 18. September 2002, 01:51: Message edited by: NTDOC ]