-af "(!(ourProperty=TRUE))"
It would be more efficient and faster for the query to actually set all of
the non-service accounts to FALSE so then you can do
-af "(ourProperty=FALSE)"
NT filters aren't the greatest for efficiency plus you can get false
positives because an account that you can't see the ourProperty value on due
to security will be reported even if it has ourProperty set to TRUE.
joe