I´m facing the same problem. I have a more general solution: in keepass one can reference other entries and their fields. This way you could create an login-entry "AD" with username / password and separate entries for all of your companies websites. These entries would have no password but a reference to the AD-Password. Whenever this is changed it is autmatically used by all company-logins.
mass update across domain
in Feature requests
Posted
I´m facing the same problem. I have a more general solution: in keepass one can reference other entries and their fields. This way you could create an login-entry "AD" with username / password and separate entries for all of your companies websites. These entries would have no password but a reference to the AD-Password. Whenever this is changed it is autmatically used by all company-logins.