This question applies to versions of firmware 3.3 and greater, on models 300 and up when using Active Directory 2003 for LDAP.
Use Active Directory's LDIFDE tool. This article from Microsoft explains how to use LDIFDE to export a user's LDIF file. This is very helpful for configuring single sign on, configuring alias linking, and finding non-standard attributes to add to the search filters on the Email Security Gateway.
Link to This Page: