Command line Active Directory query tool. Mixture of ldapsearch, search.vbs, ldp, dsquery, and dsget tools with a ton of other cool features thrown in for good measure.
There are no local security requirements for running AdFind. Information returned from Active Directory and AD/AM will be dependent on the security configured for the directory. Generally a normal Active Directory user can return a considerable amount of information from Active Directory while AD/AM tends to be more locked down.
Redirect the output to a file and it should dump the whole dit in seconds. All I was really interested in was the dn, cn, mail, and displayNames, but I found I was able to see much more. Download it here.
10:10 am
You’d like csvde even more: http://www.microsoft.com/downloads/details.aspx?FamilyId=9688F8B9-1034-4EF6-A3E5-2A2A57B5C8E4&displaylang=en
All one needs to be is a guest or user on the domain, and you can dump any domain you have a trust with as well, especially if you specify a GC/DC.
csvde.exe -s gc01.example.com -f example.com.csv