But I've checked and rechecked those.  My bind DN is cn=Admin.  That's the 
correct format, isn't it?

-
Indeed no. You want the DN for the Administrator user in AD.
Typically that would be something like 'cn=Administrator, ou=users, dc=company, dc=com'.
However, I would recommend that you use ldapsearch to first establish the correct DN
(search for all users in AD and go looking for the administrator user).