this is a great use case for the registry wizard, it should be able to do exactly what you want if you check the run as currently logged-in user box and select Edit a string. Be aware that this will generate load on your Active Directory, you should use the ‘run over time’ options in the Take Action Dialog to spread this action out so you don’t have everything asking AD for information at the same time.