I have a need to sync Active Directory information with another system. I need to pull out a list of AD users, and all their info (first name, last name, email -- anything stored with their record in AD, essentially.)
I did this once before -- years ago -- and it involved running a command line utility to export the AD user database to an XML file, which I then parsed.
Is this still the right way to do it, or have things changed in the intervening years? Any chance the domain controller has some sort of real-time Web service now?