[2005] Finding exchange servers and user acounts on a local network

Hello,

Is it possible to find what exchange servers are running on a local network and the user accounts.

Currently are exchange servers are 2003 and 2007.

If anyone can give me some direction to go in, sample code etc, would be most helpful

Thanks in advance,

Steve