PF Updating Active Directory

Good afternoon,

I am working on a process flow that will update the network Active Directory.
We are looking to make Lawson HR the driver in generating User ID's for the network as well as Portal.
(We are planning on doing an ldap bind to the network AD.)

I would like to create a New Hire PA Action that triggers a process flow to:
* Create and Update our Network Active Directory with a user ID and Password. 
    (as well as enrolling them in an initial default Group, etc...).

* Additionally, I would like to update Lawson ldap with default user information. (Assign identity for ess, etc..)
   ( I understand that  I can use 'ResourceUpdate ' nodes for this.)

* I am also considering the possibility of hitting another LDAP to a different application as well.

(In reverse I would like to inactive User accounts in a Termination PF as well)

MY first step is to attempt a script to update the Network Active Directory. (This seems like it will be the most difficult of tasks.) I am thinking that this can be done with the 'SysCommand' Node?? 


I would appreciate any direction, logic, code, thoughts or if anyone has accompolished anything like this.
( I am not so experienced with LDAP/AD, But I am working on it...)


We are Lawson Hosted:

Env: Aix 9.0.1.7
App: MSP 901.6
LS - LDAP:MsAdam 

Network AD Windows2003 (Updating to 2008 sometime soon?)

(There also may be firewall issues to consider in a PF executing from Lawson outside of our network and hitting the network AD.)


Thank you very much for any repsonse.
Curt