Well, here's what I've got so far. I looked all over the 'Net, and found a ton of stuff on M$oft's site; actually, they had the best stuff once I read through the fluff. Man, what a convoluted mess this AD stuff is. It took a while, but I can now list out the things that can be changed for AD via a Kix script...Whew!!

Here's an example on how I get my list of changeable properties for a single user account...hope this helps out others!!

$A = GetObject("WinNT://thebraunhome.fan/administrator,user")
EnumObjProps($A)

Function EnumObjProps($object)
Dim $Class, $Schema, $Value, $property, $cont

$Class = GetObject($object.schema)
? "Class: " + $Class.Name
? "GUID: " + $Class.GUID
? "Implemented by: " + $Class.CLSID

If $Class.Container
? ? "Container Object"
? "Class Contains:"
For Each $cont In $Class.Containment
? " " + $cont
Next
Else
? ? "Leaf Object"
EndIf

? "Mandatory Properties in this Class: "
For Each $property In $Class.MandatoryProperties
? " " + $property
Next

? ? "Optional Properties in this Class: "
For Each $property In $Class.OptionalProperties
? " " + $property; + " " + $property.item
Next
EndFunction


;Examples:

;$A = GetObject("WinNT://myComputer,computer")
;EnumObjProps($A)

;$A = GetObject("WinNT://myDomain/user1,user")
;EnumObjProps($A)

;$A = GetObject("LDAP://us-tyco-e/CN=BULLOCKHA,OU=test,OU=9826,OU=NCS,OU=Machines,DC=us,DC=tycoelectronics,DC=com")
;EnumObjProps($A)
_________________________
---Thaddeus