New Microsoft sysinternals tool: ADexplorer
He's still at it. The ADExplorer lets you see everything in an AD store, but more important you can take a snapshot for offline viewing and can compare snapshots. It just feels like a tool you need to know about, but hopefully never have to use.