There are times when I need to verify what I am syncing using the User Profiles Synchronization. The problem is, many sites won’t give SharePoint consultants access to the domain controller. This makes it very difficult to query AD.
Sysinternals have a very useful tool called: ADExplorer.
It doesn’t need installing.
You don’t need to be a member of the domain, just run it and put in the credentials.
You can use your Farm or Profile Sync account as it will have read access to your OU as per your setup.