Cheating at LDAP in MS Active Directory

adsiedit.exe allows you to click your way through the AD directory tree and view and edit attributes, in short. It's pretty handy for quickly getting the dn of an object when you're not entirely sure of the directory structure to begin with. It's all rather self-explanatory and clicky friendly:

adsiedit

adsiedit