Techlife Blog 
How to scan or browse your company’s Active Directory
January 28th, 2009
Another great tool worth reviewing is adexplorer.exe which allows in most AD environments users the ability to go and look at ADS. So this can be useful for determining if users belong to the correct OU. It runs stand alone and does not require necessarily that you are an Enterprise\Domain Admin. Also you can save some time while drilling down throw to the root cause of an issue whether it be ACLs, Perms, etc. related.