Active Directory Cookbook for windows server 2003- P58 pdf

581
Type of tool:
Command line
Where to find it:
%SystemRoot%\System32 on Windows 2000 and Windows Server 2003
Recipes in which it is used:
Recipe 2.2, Recipe 2.4, Recipe 3.21, Recipe 3.28, Recipe 13.8
NTDS Util Command (ntdsutil.exe)



Tasks that can be accomplished:
Perform a variety of DIT maintenance functions, such as checking DIT file integrity and
semantics, perform a soft recovery, perform restores, view FSMO role holders, manages
LDAP query policies, find and remove duplicate SIDs, clean-up metadata from a failed
domain controller, and set the DS Restore mode administrator password
Type of tool:
Command line
Where to find it:
%SystemRoot%\System32 on Windows 2000 and Windows Server 2003
Recipes in which it is used:
Recipe 2.5, Recipe 2.6, Recipe 2.24, Recipe 3.6, Recipe 3.26, Recipe 3.27, Recipe 4.16,
Recipe 4.23
, Recipe 14.4, Recipe 16.3, Recipe 16.5, Recipe 16.6, Recipe 16.7, Recipe
16.8, Recipe 16.9, Recipe 16.12, Recipe 16.15, Recipe 17.1, Recipe 17.3, Recipe 17.4,
Recipe 17.8
OID Generator Command (oidgen.exe)

Tasks that can be accomplished:

582
Generate an object identifier to be used when creating new classes or attributes in the
schema
Type of tool:
Command line
Where to find it:
Windows 2000 Resource Kit
Recipes in which it is used:
Recipe 10.3

Redirect Default Computers Command (redircmp.exe)



Tasks that can be accomplished:
Redirect the default computers container to another location in the directory tree
Type of tool:
Command line
Where to find it:
%SystemRoot%\System32 on Windows Server 2003
Recipes in which it is used:
Recipe 8.12

Redirect Default Users Command (redirusr.exe)



Tasks that can be accomplished:

Redirect the default users container to another location in the directory tree
Type of tool:

583
Command line
Where to find it:
%SystemRoot%\System32 on Windows Server 2003
Recipes in which it is used:
Recipe 8.12
Reg Command (reg.exe)



Tasks that can be accomplished:
Query, add, delete, copy, save, restore, load, unload, compare, export, and import registry
keys and values
Type of tool:
Command line
Where to find it:
Support Tools for Windows 2000 and Windows Server 2003
Recipes in which it is used:
Recipe 3.23, Recipe 10.1, Recipe 11.16, Recipe 11.18, Recipe 11.20, Recipe 11.29,
Recipe 12.4
, Recipe 12.9, Recipe 13.13, Recipe 13.14, Recipe 14.17, Introduction in
Chapter 15
, Recipe 15.1, Recipe 15.3, Recipe 15.4, Recipe 16.9, Recipe 16.13

Registry Editor (regedit.exe)

Tasks that can be accomplished:
Browse, query, add, delete, rename, export, import, and copy registry keys and values
Type of tool:
Graphical User Interface

584
Where to find it:
%SystemRoot%\System32 on Windows 2000 and Windows Server 2003
Recipes in which it is used:
Recipe 3.22, Recipe 3.23, Recipe 11.17, Recipe 11.19, Recipe 11.21, Recipe 11.30,
Recipe 12.5, Recipe 12.10, Recipe 14.18, Recipe 15.1, Recipe 15.2, Recipe 15.4, Recipe
15.5, Recipe 16.11, Recipe 16.14
Rename Domain Command (rendom.exe)



Tasks that can be accomplished:
Rename a domain (requires the Windows Server 2003 forest functional level)
Type of tool:
Command line
Where to find it:
/>
Recipes in which it is used:
Recipe 2.8
Replication Diagnostics Command (repadmin.exe)



Tasks that can be accomplished:

Display the bridgeheads for a site, find the ISTG for a site, trigger the KCC, force
replication to a partner, replicate a single object, force synchronization of a naming
context, view the replication status of several domain controllers, show the differences
between two domain controllers, view object metadata, obtain the up-to-dateness vector,
and a variety of other replication management functions
Type of tool:
Command line

585
Where to find it:
Support Tools for Windows 2000 and Windows Server 2003
Recipes in which it is used:
Recipe 11.13, Recipe 11.22, Recipe 11.23, Recipe 11.25, Recipe 11.27, Recipe 12.1,
Recipe 12.2, Recipe 12.3, Recipe 12.4, Recipe 12.8, Recipe 12.12, Recipe 17.7
Replication Monitor (replmon.exe)



Tasks that can be accomplished:
View the replication status of the naming contexts supported by a domain controller,
force replication to a partner, force synchronization of a naming context, get the current
USN, search a domain for replication errors, generate a detailed status report, and much
more
Type of tool:
Graphical User Interface
Where to find it:
Support Tools for Windows 2000 and Windows Server 2003
Recipes in which it is used:
Recipe 11.13, Recipe 12.3
Resultant Set of Policy Snap-in (rsop.msc)

Tasks that can be accomplished:
View the RSoP for a user and computer
Type of tool:
MMC snap-in
Where to find it:

586
%SystemRoot%\System32 on Windows Server 2003
Recipes in which it is used:
Recipe 9.20

SecEdit Command (secedit.exe)



Tasks that can be accomplished:
Refresh group policy settings, and analyze, configure, export and validate security
settings
Type of tool:
Command line
Where to find it:
%SystemRoot%\System32 on Windows 2000 and Windows Server 2003
Recipes in which it is used:
Recipe 9.21
Time Service (w32tm.exe)

Tasks that can be accomplished:
Configure and monitor the Windows Time Service
Type of tool:
Command line
Where to find it:
%SystemRoot%\System32 on Windows 2000 and Windows Server 2003
Recipes in which it is used:

587
Recipe 3.13

Unlock (unlock.exe)



Tasks that can be accomplished:
Find users that are locked out and unlock them
Type of tool:
Command line
Where to find it:

Recipes in which it is used:
Recipe 6.9
UUID Generator Command (uuidgen.exe)



Tasks that can be accomplished:
Generate a UUID/GUID that can be used when creating new classes and attributes

Type of tool:
Command line
Where to find it:
Windows 2000 Platform SDK
Recipes in which it is used:
Recipe 10.4

WinNT32 Command (winnt32.exe)


588


Tasks that can be accomplished:
Upgrade a computer to Windows 2000 or Windows Server 2003; can also perform
checks to determine if an upgrade is possible
Type of tool:
Wizard
Where to find it:
\i386 on Windows 2000 and Windows Server 2003 CD
Recipes in which it is used:
Recipe 2.12

589
Colophon
Our look is the result of reader comments, our own experimentation, and feedback from
distribution channels. Distinctive covers complement our distinctive approach to technical topics,
breathing personality and life into potentially dry subjects.
The animal on the cover of Active Directory Cookbook is a bluefin tuna (Thunnus thynnus), also
known as a horse mackerel. It inhabits both the Atlantic and Pacific Oceans in temperate and

subtropical waters. The body of a bluefin tuna is a metallic, deep blue on top, while the
undersides and belly are silvery white. The first dorsal fin is yellow or blue; the second is red or
brown. The rear fin and finlets are yellow, edged with black. The central caudal keel is black.
The bluefin tuna is one of the largest and fastest species of marine fish. An adult can weigh as
much as 1,500 pounds (680 kilograms), and can swim up to speeds of 55 miles per hour (88.5
kilometers per hour). A bluefin tuna can swim across the Atlantic Ocean in 40 days. Recent pop-
up satellite tracking has revealed that the bluefin tuna can dive to depths greater than 3,000 feet
in a matter of minutes and still maintain a body temperature of 77 degrees Fahrenheit (25 degrees
Celsius), even in near-freezing water.
Commercial fishing has reduced the stock of bluefin tuna to the extent that a single fish, once
caught, can be worth up to $40,000 (U.S.). However, the situation is reversible, and the numbers
of tuna could increase if the guidelines of the International Commission for the Conservation of
Atlantic Tuna (ICCAT), an intergovernmental fishing organization that oversees tuna, are
followed.
Matt Hutchinson was the production editor for Active Directory Cookbook. Genevieve
d'Entremont, Marlowe Shaeffer, and Darren Kelly provided quality control. Octal Publishing, Inc.
provided production services.
Ellie Volckhausen designed the cover of this book, based on a series design by Edie Freedman.
The cover image is a 19th-century engraving from the Dover Pictorial Archive. Emma Colby
produced the cover layout with QuarkXPress 4.1 using Adobe's ITC Garamond font.
David Futato designed the interior layout. This book was converted by Julie Hawks to
FrameMaker 5.5.6 with a format conversion tool created by Erik Ray, Jason McIntosh, Neil
Walls, and Mike Sierra that uses Perl and XML technologies. The text font is Linotype Birka; the
heading font is Adobe Myriad Condensed; and the code font is LucasFont's TheSans Mono
Condensed. The illustrations that appear in the book were produced by Robert Romano and
Jessamyn Read using Macromedia FreeHand 9 and Adobe Photoshop 6. The tip and warning
icons were drawn by Christopher Bing. This colophon was written by Reg Aubry.
The online edition of this book was created by the Safari production group (John Chodacki,
Becki Maisch, and Madeleine Newell) using a set of Frame-to-XML conversion and cleanup
tools written and maintained by Erik Ray, Benn Salter, John Chodacki, and Jeff Liggett.