If you don't have Win2k3 servers, then you can't use the -inactive flag, so you may want to try this tool instead of dsquery
actually, i would try this first, because it's ready to go. you have to copy the .bat file here
http://www.jsifaq.com/SUBQ/tip8200/rh8260.htm
and the one here as well
cool, i'll try this one tomorrow