Kent,
Hope i'm not too late
What you are asking about is possible, and would be easier with LDAP, as it's possible to use it through ADO object and so, working as if we have a database

For the moment, as i've just drop a look into this, here are what i'm thinking about :
ADsearch UDF in UDF section to start.
ADsearchpanel sample provided with KiXGUI. get a look to this link (it's completely stand alone)
and the user and workstation ADs properties from MSDN (seems the User.LoginWorkstations property will do the job)

Also, never forget Dynamic object (we have the session object using WinNT:// which look promising)

I'll see this more closer this WE if i can. Let me know if you found something

_________________________
? getobject(Kixtart.org.Signature)