Simplest way is to create an instance of the prodn database and make it into a dev database.
You can buy a utility at globalcents.com which among other lot nice things has this ability too.
if you bought directory svcs and are using it to import users frm an AD/LDAP then you could tie this instance using the same queries.But there isn't going to be groups/permissions coming over correctly between the instances unless you manually replicated it.
Do you need more ways or is this good to start with?
Well, if I called the wrong number, why did you answer the phone?
James Thurber, New Yorker cartoon caption, June 5, 1937