A lot of the Active Directory related functionality has been removed from WMI but there is a little bit left in the rootMicrosoftActiveDirectory namespace. This is on a Windows 2008 R2 domain controller – I don’t know if this is available on down level… Read the full text.