Active Directory Explorer (AD Explorer) is an advanced Active Directory
(AD) viewer and editor. You can use AD Explorer to easily navigate an AD
database, define favorite locations, view object properties and
attributes without having to open dialog boxes, edit permissions, view
an object's schema, and execute sophisticated searches that you can save
and re-execute.
AD Explorer also includes the ability to save snapshots of an AD
database for off-line viewing and comparisons. When you load a saved
snapshot, you can navigate and explore it as you would a live database.
If you have two snapshots of an AD database you can use AD Explorer's
comparison functionality to see what objects, attributes and security
permissions changed between them.