This hould give you all SQL accounts (so no domain or built-in accounts)
And then you will have to write a script to wrap around each account and turn policy either on or off.
SELECT name, loginname FROM syslogins WHERE name NOT LIKE '%\%' AND name NOT LIKE '#%'
Adam Zacks-------------------------------------------Be Nice, Or Leave