I was helping out an administrator not too long ago who was trying to find user accounts based on some specific user properties. My first thought for a quick and easy solution was to use DSQuery User.
dsquery * domainroot -filter "((objectCategory=Person)(objectClass=User)(msNPAllowDialin=TRUE)) -attr sAMAccountName<BR><BR>Want it to tell me the name of all my users thathave Dialin access enabled.