I searched for a long time too, I'm not sure where I found it, but it sets 1 value, something like 0x00008 to a field that controls how the password field can be queried.
A CommVault Forums Moderator has de-linked the original URL contained in this post to point to the current website hosting the same content in order to maintain the informative value of this posting.
The adldaptool sets the value 0x00000008 to the searchFlags attributes of "Unicode-Pwd" and "SID-History" found under CN=Schema and Cn=Configuration. This tells Active Directory to preserve, on deletion, these two attributes.
If it jams, force it.
If it breaks, it needed replacing anyway.