That was to easy, you just split the distinguised name and thought that the domain name was = the first in distinguised name.
But domain name can often be something else.(That is what the user sees in there logon prompt)
I looked at the microsoft link, but I dident find any that could fit.
Perhaps there is no other way than with the macro @domain.

/mima