http://www.winnetmag.com/Article/Art...361/15361.html

Event IDs 627 & 628 may be what you are looking for. Also if you are using AD you can use LDAP compliant tools to manage your users, ldp.exe I believe is in /support/tools on Win2000 Server and up.


-Maestr0