This is a truly great hint. I am still trying to make it work. Will have to ask my friendly Exchange admin.

Remember, you need Directory Utility to "bind" your Mac to the domain. Once bound, you don't need LDAP settings. You should have "Directory Services" under the Directory column in Address Book. You can then get all the information you need. And from the command line, you can even browse all users, printers, etc. using "dscl". See "man dscl".

You do not need to bind to the AD domain just to make this hint work. I don't have my Mac bound to the AD domain, and the hint works just fine.

Of course there are plenty of reasons why you might want or need to bind to the AD domain, but personally I don't bother on my Mac at work because I don't any reason or need to.