I am trying to figure out how to query for all user accounts in AD that have permission inheritance turned off. I have not been able to find anything on this. Does anyone have any ideas?