mat2e

I´m facing the same problem. I have a more general solution: in keepass one can reference other entries and their fields. This way you could create an login-entry "AD" with username / password and separate entries for all of your companies websites. These entries would have no password but a reference to the AD-Password. Whenever this is changed it is autmatically used by all company-logins.