Table 6. Active Directory-related command-line tools
Tool | Description |
---|---|
MoveTree | Move objects from one domain to another. |
SIDWalker | Set the access control lists on objects previously owned by accounts that were moved, orphaned, or deleted. |
LDP | Allows LDAP operations to be performed against Active Directory. This tool has a graphical user interface. |
DNSCMD | Check dynamic registration of DNS resource records, including Secure DNS update, as well as deregistration of resource records. |
DSACLS | View or modify the access control lists of directory objects. |
NETDOM | Batch management of trusts, joining computers to domains, verifying trusts and secure channels. |
NETDIAG | Check end-to-end network and distributed services functions. |
NLTest | Check that the locator and secure channel are functioning. |
REPAdmin | Check replication consistency between replication partners, monitor replication status, display replication metadata, force replication events and knowledge consistency checker (KCC) recalculation. |
REPLMon | Display replication topology, monitor replication status (including group policies), force replication events and knowledge consistency checker recalculation. This tool has a graphical user interface. |
DSAStat | Compare directory information on domain controllers and detect differences. |
ADSIEdit | A Microsoft Management Console (MMC) snap-in used to view all objects in the directory (including schema and configuration information), modify objects and set access control lists on objects. |
SDCheck | Check access control list propagation and replication for specified objects in the directory. This tool enables an administrator to determine if access control lists are being inherited correctly and if access control list changes are being replicated from one domain controller to another. |
ACLDiag | Determine whether a user has been granted or denied access to a directory object. It can also be used to reset access control lists to their default state. |
DFSCheck | Command-line utility for managing all aspects of Distributed File System (Dfs), checking the configuration concurrency of Dfs servers, and displaying the Dfs topology. |
This information came from http://www.microsoft.com/technet/win2000/win2ksrv/technote/adarch.asp Table 6
Return to previous menu