How to get attributes metadata on AD object

Querying Active directory for disabled user objects is pretty straightforward. But how can you tell exactly when the user was disabled? How about get the metadata for one or more attributes on a specific active directory object?

Check out Brandon's blog for the answer.