Use scripts or custom applications to do this, don't originate it from SQL Server (speaking as both a SQL Server DBA and a former directory services administrator). If you're using scripting, you've got ADSI as an option as well as System.DirectoryServices.Protocols if you're using .NET or PowerShell. Do *not* use System.DirectoryServices:

Joe Richards (Directory Services MVP) on System.DirectoryServices[/url]