I might hazard a guess that the user you are connecting as doesn't have the necessary domain access?

Try using Net::LDAP. The printMembers.pl script which comes in the distribution does exactly what you want. Be aware that Active Directory requires a login/password (will not accept anonymous binds), but you can use the form cn=username@domain.name instead of needing to know the actual DN.