I've seen some VBA code out there that snoops around Active Directory, but
haven't worked with it myself. Try googling it and you should find some
examples - especially on www.mvps.org (The MVPS website - can't remember if
thats the actual domain) but it's easy to find if you look.