I had to do something similar recently, but using the NT SAM rather than AD. The solution involved a wee bit of script and a dll using ADSI and ADO.

Are...