I have a UDF for this Kent. You could modify to not bring back all the data if you want.

LDAP is required because the WinNT provider does not understand how to access many of the properties that AD contains.

http://www.kixtart.org/cgi-bin/ultimatebb.cgi?ubb=get_topic;f=12;t=000329