I was helping a friend today with this:
it returns enabled users with an email address defined.
dsquery * -filter "(&(&(objectCategory=user)(objectClass=user)(mail=*)(&(!userAccountControl:1.2.840.113556.1.4.803:=2))))" -limit 0 | dsget user -display -fn -ln -email
