571 Tasks that can be accomplished: Retrieve the properties of computer, contact, subnet, group, OU, server, site, user, quota, and partition objects Type of tool: Command line Where to find it: %SystemRoot%\System32 on Windows Server 2003 Recipes in which it is used: Recipe 7.2, Recipe 7.3, Recipe 6.14, Recipe 6.16, Recipe 11.2, Recipe 11.5, Recipe 15.17 DS Modify Command (dsmodify.exe) Tasks that can be accomplished: Modify properties of computer, contact, group, OU, server, user, quota, and partition objects Type of tool: Command line Where to find it: %SystemRoot%\System32 on Windows Server 2003 Recipes in which it is used: Recipe 3.17 , Recipe 6.3, Recipe 6.6, Recipe 6.12, Recipe 6.16, Recipe 6.17, Recipe 6.20, Recipe 6.21 , Recipe 6.22, Recipe 6.24, Recipe 6.25, Recipe 6.29, Recipe 7.4, Recipe 7.6, Recipe 8.7 DS Move Command (dsmove.exe) 572 Tasks that can be accomplished: Move and rename objects Type of tool: Command line Where to find it: %SystemRoot%\System32 on Windows Server 2003 Recipes in which it is used: Recipe 3.11, Recipe 4.17, Recipe 4.19, Recipe 5.6, Recipe 5.7, Recipe 6.5, Recipe 6.6, Recipe 8.4, Recipe 11.16 DS Query Command (dsquery.exe) Tasks that can be accomplished: Perform queries for computer, contact, group, OU, server, site, subnet, user, quota, and partition objects. Perform generic queries to retrieve any type of object Type of tool: Command line Where to find it: %SystemRoot%\System32 on Windows Server 2003 Recipes in which it is used: Recipe 2.7 , Recipe 2.9, Recipe 2.13, Recipe 2.14, Recipe 3.19, Recipe 3.20, Recipe 3.25, Recipe 4.2 , Recipe 4.5, Recipe 4.6, Recipe 4.7, Recipe 4.9, Recipe 4.22, Recipe 5.2, Recipe 5.3, Recipe 5.6, Recipe 5.8, Recipe 6.4, Recipe 6.13, Recipe 6.23, Recipe 6.28, Recipe 7.9, Recipe 8.8, Recipe 10.8, Recipe 10.10, Recipe 10.15, Recipe 10.16, Recipe 10.17, Recipe 10.18, Recipe 11.2, Recipe 11.3, Recipe 11.5, Recipe 11.8, Recipe 11.15, Recipe 12.11, Recipe 15.14, Recipe 17.2, Recipe 17.5 DS Remove Command (dsrm.exe) 573 Tasks that can be accomplished: Remove leaf nodes and subtrees Type of tool: Command line Where to find it: %SystemRoot%\System32 on Windows Server 2003 Recipes in which it is used: Recipe 4.20, Recipe 4.21, Recipe 5.4, Recipe 5.5 Enumprop Command (enumprop.exe) Tasks that can be accomplished: View the attributes of an object Type of tool: Command line Where to find it: Windows 2000 Resource Kit Recipes in which it is used: Recipe 2.9 , Recipe 2.13, Recipe 2.14, Recipe 4.1, Recipe 4.2, Recipe 6.11, Recipe 6.30 Group Policy Management Console (gpmc.msc) Tasks that can be accomplished: 574 One-stop shopping for all your GPO management needs. You can perform just about any GPO management task from this tool. A variety of scripts are also provided with the GPMC install that can be used to manage GPOs from a command line. The GPMC scripts used in this book include: BackupGpo.wsf, CopyGpo.wsf, CreateGpo.wsf, DeleteGpo.wsf, DumpGpoInfo.wsf, GetReportsForGpo.wsf, ImportGpo.wsf, ListAllGpos.wsf, QueryBackupLocation.wsf, RestoreGpo.wsf, and SetGpoPermissions.wsf Type of tool: MMC snap-in Where to find it: http://www.microsoft.com/downloads/details.aspx?FamilyId=F39E9D60-7E41-4947- 82F5-3330F37ADFEB&displaylang=en Recipes in which it is used: Recipe 5.11, Recipe 9.1, Recipe 9.2, Recipe 9.3, Recipe 9.4, Recipe 9.5, Recipe 9.6, Recipe 9.7, Recipe 9.8, Recipe 9.9, Recipe 9.10, Recipe 9.11, Recipe 9.12, Recipe 9.13, Recipe 9.14, Recipe 9.15, Recipe 9.16, Recipe 9.17, Recipe 9.18, Recipe 9.19 Group Policy Object Editor (gpedit.msc) Tasks that can be accomplished: Modify the settings of a GPO Type of tool: MMC snap-in Where to find it: %SystemRoot%\System32 on Windows 2000 and Windows Server 2003 Recipes in which it is used: Recipe 9.6 Group Policy Verification Tool (gpotool.exe) 575 Tasks that can be accomplished: Verify consistency of a GPO across domain controllers, view properties of GPOs, such as display name, when created and changed, version number, GUID, and flags Type of tool: Command line Where to find it: Resource Kit for Windows 2000 and Windows Server 2003 Recipes in which it is used: Recipe 9.1 Group Policy Results Command (gpresult.exe) Tasks that can be accomplished: Display the resultant set of policy (RSoP) for a user and computer Type of tool: Command line Where to find it: %SystemRoot%\System32 on Windows Server 2003 Recipes in which it is used: Recipe 9.20 Group Policy Refresh Command (gpupdate.exe) Tasks that can be accomplished: 576 Apply the changed settings of a GPO, apply all settings of a GPO, and reboot or logoff user after GPO processing completes Type of tool: Command line Where to find it: %SystemRoot%\System32 on Windows Server 2003 Recipes in which it is used: Recipe 9.21 IP Configuration (ipconfig.exe) Tasks that can be accomplished: Request, release, renew an IP address, flush the local DNS cache, display the local DNS cache, and register resource records in DNS Type of tool: Command line Where to find it: %SystemRoot%\System32 on Windows 2000 and Windows Server 2003 Recipes in which it is used: Recipe 13.11 Kerberos List (klist.exe) Tasks that can be accomplished: View and purge Kerberos tickets 577 Type of tool: Command line Where to find it: Resource Kit for Windows 2000 and Windows Server 2003 Recipes in which it is used: Recipe 14.9 Kerberos Tray (kerbtray.exe) Tasks that can be accomplished: View and purge Kerberos tickets Type of tool: Graphical User Interface Where to find it: Resource Kit for Windows 2000 and Windows Server 2003 Recipes in which it is used: Recipe 14.17 LDIFDE Command (ldifde.exe) Tasks that can be accomplished: Import and export objects using the LDAP Interchange Format (LDIF) Type of tool: Command line 578 Where to find it: %SystemRoot%\System32 on Windows 2000 and Windows Server 2003 Recipes in which it is used: Recipe 2.11, Recipe 2.13, Recipe 2.14, Recipe 4.10, Recipe 4.11, Recipe 4.13, Recipe 4.14, Recipe 4.15, Recipe 4.24, Recipe 4.25, Recipe 5.10, Recipe 6.3, Recipe 7.9, Recipe 8.9, Recipe 8.10, Recipe 10.7, Recipe 10.9, Recipe 10.11, Recipe 10.12, Recipe 10.13, Recipe 10.14, Recipe 10.20, Recipe 10.22, Recipe 11.1, Recipe 11.4, Recipe 11.7, Recipe 11.9, Recipe 11.10, Recipe 11.12, Recipe 11.14, Recipe 11.29, Recipe 12.6, Recipe 13.17, Recipe 15.15, Recipe 15.16, Recipe 16.10, Recipe 16.13, Recipe 16.18, Recipe 17.7 LDP (ldp.exe) Tasks that can be accomplished: Generic LDAP object editor and browser Type of tool: Graphical User Interface Where to find it: Support Tools for Windows 2000 and Windows Server 2003 Recipes in which it is used: Recipe 3.10 , Recipe 3.19, Recipe 4.1, Recipe 4.2, Recipe 4.2, Recipe 4.3, Recipe 4.5, Recipe 4.6, Recipe 4.7, Recipe 4.8, Recipe 4.9, Recipe 4.15, Recipe 4.22, Recipe 5.8, Recipe 8.10, Recipe 8.11, Recipe 8.12, Recipe 10.15, Recipe 10.16, Recipe 10.17, Recipe 10.18, Recipe 11.8, Recipe 11.15, Recipe 12.11, Recipe 12.12, Recipe 15.9, Recipe 16.10, Recipe 16.16, Recipe 16.17, Recipe 17.2, Recipe 17.3 Move Tree Command (movetree.exe) Tasks that can be accomplished: Move objects within and between a domain 579 Type of tool: Command line Where to find it: Support Tools for Windows 2000 and Windows Server 2003 Recipes in which it is used: Recipe 4.18 Netdom Command (netdom.exe) Tasks that can be accomplished: Add a computer to the domain, rename a computer, join a computer to the domain, move a computer to a new domain, query computers, trusts, and FSMOs in a domain, remove a computer from a domain, reset a computer, and manage and verify trusts Type of tool: Command line Where to find it: Support Tools for Windows 2000 and Windows Server 2003 Recipes in which it is used: Recipe 2.15 , Recipe 2.16, Recipe 2.17, Recipe 2.18, Recipe 2.20, Recipe 2.20, Recipe 2.21, Recipe 2.22, Recipe 2.23, Recipe 3.7, Recipe 3.8, Recipe 3.25, Recipe 8.3, Recipe 8.5, Recipe 8.7, Recipe 18.7 Network Connectivity Tester (netdiag.exe) Tasks that can be accomplished: Run a variety of network-based diagnostics tests Type of tool: 580 Command line Where to find it: Support Tools for Windows 2000 and Windows Server 2003 Recipes in which it is used: Recipe 14.18 NLTest Command (nltest.exe) Tasks that can be accomplished: Query, verify, and reset the secure channel of a computer; obtain a list of domain controllers for a domain; find a domain controller; find a client's site; display the site coverage for a domain controller; register and deregister a domain controller's resource records; display the parent domain; query trusts; view the number of logon attempts processed by a domain controller; and perform a shutdown Type of tool: Command line Where to find it: Support Tools for Windows 2000 and Windows Server 2003 Recipes in which it is used: Recipe 3.9 , Recipe 3.10, Recipe 3.12, Recipe 3.14, Recipe 8.6, Recipe 11.18, Recipe 11.20, Recipe 13.13, Recipe 13.16, Recipe 15.3 Nslookup Command (nslookup.exe) Tasks that can be accomplished: Perform DNS lookups for any resource record type . processed by a domain controller; and perform a shutdown Type of tool: Command line Where to find it: Support Tools for Windows 2000 and Windows Server 2003 Recipes in which it is used:. number, GUID, and flags Type of tool: Command line Where to find it: Resource Kit for Windows 2000 and Windows Server 2003 Recipes in which it is used: Recipe 9.1 Group Policy Results Command. Kerberos tickets 577 Type of tool: Command line Where to find it: Resource Kit for Windows 2000 and Windows Server 2003 Recipes in which it is used: Recipe 14.9 Kerberos Tray (kerbtray.exe)