Tasks that can be accomplished: Remove leaf nodes and subtrees Type of tool: Command line Where to find it: %SystemRoot%\System32 on Windows Server 2003 Recipes in which it is used:
Trang 1Tasks that can be accomplished:
Retrieve the properties of computer, contact, subnet, group, OU, server, site, user, quota, and partition objects
Type of tool:
Command line
Where to find it:
%SystemRoot%\System32 on Windows Server 2003
Recipes in which it is used:
Recipe 7.2, Recipe 7.3, Recipe 6.14, Recipe 6.16, Recipe 11.2, Recipe 11.5, Recipe 15.17
DS Modify Command (dsmodify.exe)
Tasks that can be accomplished:
Modify properties of computer, contact, group, OU, server, user, quota, and partition objects
Type of tool:
Command line
Where to find it:
%SystemRoot%\System32 on Windows Server 2003
Recipes in which it is used:
Recipe 3.17, Recipe 6.3, Recipe 6.6, Recipe 6.12, Recipe 6.16, Recipe 6.17, Recipe 6.20, Recipe 6.21, Recipe 6.22, Recipe 6.24, Recipe 6.25, Recipe 6.29, Recipe 7.4, Recipe 7.6, Recipe 8.7
DS Move Command (dsmove.exe)
Trang 2Move and rename objects
Type of tool:
Command line
Where to find it:
%SystemRoot%\System32 on Windows Server 2003
Recipes in which it is used:
Recipe 3.11, Recipe 4.17, Recipe 4.19, Recipe 5.6, Recipe 5.7, Recipe 6.5, Recipe 6.6, Recipe 8.4, Recipe 11.16
DS Query Command (dsquery.exe)
Tasks that can be accomplished:
Perform queries for computer, contact, group, OU, server, site, subnet, user, quota, and partition objects Perform generic queries to retrieve any type of object
Type of tool:
Command line
Where to find it:
%SystemRoot%\System32 on Windows Server 2003
Recipes in which it is used:
Recipe 2.7, Recipe 2.9, Recipe 2.13, Recipe 2.14, Recipe 3.19, Recipe 3.20, Recipe 3.25, Recipe 4.2, Recipe 4.5, Recipe 4.6, Recipe 4.7, Recipe 4.9, Recipe 4.22, Recipe 5.2, Recipe 5.3, Recipe 5.6, Recipe 5.8, Recipe 6.4, Recipe 6.13, Recipe 6.23, Recipe 6.28, Recipe 7.9, Recipe 8.8, Recipe 10.8, Recipe 10.10, Recipe 10.15, Recipe 10.16, Recipe 10.17, Recipe 10.18, Recipe 11.2, Recipe 11.3, Recipe 11.5, Recipe 11.8, Recipe 11.15, Recipe 12.11, Recipe 15.14, Recipe 17.2, Recipe 17.5
Trang 3Tasks that can be accomplished:
Remove leaf nodes and subtrees
Type of tool:
Command line
Where to find it:
%SystemRoot%\System32 on Windows Server 2003
Recipes in which it is used:
Recipe 4.20, Recipe 4.21, Recipe 5.4, Recipe 5.5
Enumprop Command (enumprop.exe)
Tasks that can be accomplished:
View the attributes of an object
Type of tool:
Command line
Where to find it:
Windows 2000 Resource Kit
Recipes in which it is used:
Recipe 2.9, Recipe 2.13, Recipe 2.14, Recipe 4.1, Recipe 4.2, Recipe 6.11, Recipe 6.30
Group Policy Management Console (gpmc.msc)
Tasks that can be accomplished:
Trang 4GPO management task from this tool A variety of scripts are also provided with the GPMC install that can be used to manage GPOs from a command line The GPMC
scripts used in this book include: BackupGpo.wsf, CopyGpo.wsf, CreateGpo.wsf,
DeleteGpo.wsf, DumpGpoInfo.wsf, GetReportsForGpo.wsf, ImportGpo.wsf,
ListAllGpos.wsf, QueryBackupLocation.wsf, RestoreGpo.wsf, and SetGpoPermissions.wsf Type of tool:
MMC snap-in
Where to find it:
http://www.microsoft.com/downloads/details.aspx?FamilyId=F39E9D60-7E41-4947-82F5-3330F37ADFEB&displaylang=en
Recipes in which it is used:
Recipe 5.11, Recipe 9.1, Recipe 9.2, Recipe 9.3, Recipe 9.4, Recipe 9.5, Recipe 9.6, Recipe 9.7, Recipe 9.8, Recipe 9.9, Recipe 9.10, Recipe 9.11, Recipe 9.12, Recipe 9.13, Recipe 9.14, Recipe 9.15, Recipe 9.16, Recipe 9.17, Recipe 9.18, Recipe 9.19
Group Policy Object Editor (gpedit.msc)
Tasks that can be accomplished:
Modify the settings of a GPO
Type of tool:
MMC snap-in
Where to find it:
%SystemRoot%\System32 on Windows 2000 and Windows Server 2003
Recipes in which it is used:
Recipe 9.6
Trang 5Tasks that can be accomplished:
Verify consistency of a GPO across domain controllers, view properties of GPOs, such as display name, when created and changed, version number, GUID, and flags
Type of tool:
Command line
Where to find it:
Resource Kit for Windows 2000 and Windows Server 2003
Recipes in which it is used:
Recipe 9.1
Group Policy Results Command (gpresult.exe)
Tasks that can be accomplished:
Display the resultant set of policy (RSoP) for a user and computer
Type of tool:
Command line
Where to find it:
%SystemRoot%\System32 on Windows Server 2003
Recipes in which it is used:
Recipe 9.20
Group Policy Refresh Command (gpupdate.exe)
Tasks that can be accomplished:
Trang 6user after GPO processing completes
Type of tool:
Command line
Where to find it:
%SystemRoot%\System32 on Windows Server 2003
Recipes in which it is used:
Recipe 9.21
IP Configuration (ipconfig.exe)
Tasks that can be accomplished:
Request, release, renew an IP address, flush the local DNS cache, display the local DNS cache, and register resource records in DNS
Type of tool:
Command line
Where to find it:
%SystemRoot%\System32 on Windows 2000 and Windows Server 2003
Recipes in which it is used:
Recipe 13.11
Kerberos List (klist.exe)
Trang 7Type of tool:
Command line
Where to find it:
Resource Kit for Windows 2000 and Windows Server 2003
Recipes in which it is used:
Recipe 14.9
Kerberos Tray (kerbtray.exe)
Tasks that can be accomplished:
View and purge Kerberos tickets
Type of tool:
Graphical User Interface
Where to find it:
Resource Kit for Windows 2000 and Windows Server 2003
Recipes in which it is used:
Recipe 14.17
LDIFDE Command (ldifde.exe)
Tasks that can be accomplished:
Import and export objects using the LDAP Interchange Format (LDIF)
Type of tool:
Command line
Trang 8%SystemRoot%\System32 on Windows 2000 and Windows Server 2003
Recipes in which it is used:
Recipe 2.11, Recipe 2.13, Recipe 2.14, Recipe 4.10, Recipe 4.11, Recipe 4.13, Recipe 4.14, Recipe 4.15, Recipe 4.24, Recipe 4.25, Recipe 5.10, Recipe 6.3, Recipe 7.9, Recipe 8.9, Recipe 8.10, Recipe 10.7, Recipe 10.9, Recipe 10.11, Recipe 10.12, Recipe 10.13, Recipe 10.14, Recipe 10.20, Recipe 10.22, Recipe 11.1, Recipe 11.4, Recipe 11.7, Recipe 11.9, Recipe 11.10, Recipe 11.12, Recipe 11.14, Recipe 11.29, Recipe 12.6, Recipe 13.17, Recipe 15.15, Recipe 15.16, Recipe 16.10, Recipe 16.13, Recipe 16.18, Recipe 17.7
LDP (ldp.exe)
Tasks that can be accomplished:
Generic LDAP object editor and browser
Type of tool:
Graphical User Interface
Where to find it:
Support Tools for Windows 2000 and Windows Server 2003
Recipes in which it is used:
Recipe 3.10, Recipe 3.19, Recipe 4.1, Recipe 4.2, Recipe 4.2, Recipe 4.3, Recipe 4.5, Recipe 4.6, Recipe 4.7, Recipe 4.8, Recipe 4.9, Recipe 4.15, Recipe 4.22, Recipe 5.8, Recipe 8.10, Recipe 8.11, Recipe 8.12, Recipe 10.15, Recipe 10.16, Recipe 10.17, Recipe 10.18, Recipe 11.8, Recipe 11.15, Recipe 12.11, Recipe 12.12, Recipe 15.9, Recipe 16.10, Recipe 16.16, Recipe 16.17, Recipe 17.2, Recipe 17.3
Move Tree Command (movetree.exe)
Trang 9Type of tool:
Command line
Where to find it:
Support Tools for Windows 2000 and Windows Server 2003
Recipes in which it is used:
Recipe 4.18
Netdom Command (netdom.exe)
Tasks that can be accomplished:
Add a computer to the domain, rename a computer, join a computer to the domain, move
a computer to a new domain, query computers, trusts, and FSMOs in a domain, remove a computer from a domain, reset a computer, and manage and verify trusts
Type of tool:
Command line
Where to find it:
Support Tools for Windows 2000 and Windows Server 2003
Recipes in which it is used:
Recipe 2.15, Recipe 2.16, Recipe 2.17, Recipe 2.18, Recipe 2.20, Recipe 2.20, Recipe 2.21, Recipe 2.22, Recipe 2.23, Recipe 3.7, Recipe 3.8, Recipe 3.25, Recipe 8.3, Recipe 8.5, Recipe 8.7, Recipe 18.7
Network Connectivity Tester (netdiag.exe)
Tasks that can be accomplished:
Run a variety of network-based diagnostics tests
Type of tool:
Trang 10Where to find it:
Support Tools for Windows 2000 and Windows Server 2003
Recipes in which it is used:
Recipe 14.18
NLTest Command (nltest.exe)
Tasks that can be accomplished:
Query, verify, and reset the secure channel of a computer; obtain a list of domain
controllers for a domain; find a domain controller; find a client's site; display the site coverage for a domain controller; register and deregister a domain controller's resource records; display the parent domain; query trusts; view the number of logon attempts processed by a domain controller; and perform a shutdown
Type of tool:
Command line
Where to find it:
Support Tools for Windows 2000 and Windows Server 2003
Recipes in which it is used:
Recipe 3.9, Recipe 3.10, Recipe 3.12, Recipe 3.14, Recipe 8.6, Recipe 11.18, Recipe 11.20, Recipe 13.13, Recipe 13.16, Recipe 15.3
Nslookup Command (nslookup.exe)