PasswordAudit
This is a short video walking you through how to do a password audit on your own domain controller/active directory environment. It does require that you already have domain admin access so it could also be used at the end of a pentest I supposed just to help audit the remainder of your customer's accounts.
Of course this is all for educational purposes and meant to only be used on environments you are allowed to do such things on.