Dumpsec from SomarSoft should be able to do that and a whole lot more. The Active
Directory command line tools such as dsquery can also do that for a W2K domain if you
install Adminpak on a Windows XP Pro domain computer and do it from that computer
logged on as a domain admin. --- Steve