Ah I love this problem... Crappy apps can't do the right thing so the AD
folks have to figure out a solution. I have been in this conversation so
many times it isn't funny. I have seen it go several ways.
1. The AD Admins cave in and do whatever to help the apps.
2. The AD Admins tell the app
Jason,
You shouldn't have any problems with your ldap query if you use the
LDAPSERVERS.mydomain.mycompany.com DNS record that you proposed below.
Using that record is the same thing as using mydomain.mycompany.com. Both
are records which point to another server.
Always glad to lend a hand to