Michael, I have done this many times in pretty much the same way you have indicated. While DN is good for basic LDAP / AD operations, ObjectGUID is preferred for ModRDN operations or if you want to change the user's DN. I have written about these operations in a blog, Using modRDN with SAP NW IDM.
Hope it helps!
Regards,
Matt
