Howard, had the chance to test your code today. I found that adding the domain name was unneccesary...

Code:

$oADUser = GetObject("LDAP://<GUID="+$oUser.GUID+">")
@ERROR " " @SERROR ?

$oADUser.distinguishedName ?