This is based on the WinNT object...

GetObject("WinNT://" + $target + "/" + $group)

I haven't looked, but I would think there would be one based on LDAP somewhere. Might get better results.