You can't query the CMC directly. Most of the data in the CMC is stored in a proprietary binary format that is only readable through using the query language in one of the SDK's (.NET or Java).
What I have done in the past is write a .NET application that queries the CMC and stores the data in an in-memory dataset and then calls a Crystal report that connects to that dataset to display the information. You can find an example of this in the BOEUserAudit example app that's available on my website -
www.dellstinnett.com/sample_code.html.
There are also some third-party tools available to retrieve this information.
www.kenhamady.com/bookmarks.html has a good list of these tools to get you started.
-Dell
IP Logged
