581 Type of tool: Command line Where to find it: %SystemRoot%\System32 on Windows 2000 and Windows Server 2003 Recipes in which it is used: Recipe 2.2, Recipe 2.4, Recipe 3.21, Recipe 3.28, Recipe 13.8 NTDS Util Command (ntdsutil.exe) Tasks that can be accomplished: Perform a variety of DIT maintenance functions, such as checking DIT file integrity and semantics, perform a soft recovery, perform restores, view FSMO role holders, manages LDAP query policies, find and remove duplicate SIDs, clean-up metadata from a failed domain controller, and set the DS Restore mode administrator password Type of tool: Command line Where to find it: %SystemRoot%\System32 on Windows 2000 and Windows Server 2003 Recipes in which it is used: Recipe 2.5, Recipe 2.6, Recipe 2.24, Recipe 3.6, Recipe 3.26, Recipe 3.27, Recipe 4.16, Recipe 4.23 , Recipe 14.4, Recipe 16.3, Recipe 16.5, Recipe 16.6, Recipe 16.7, Recipe 16.8, Recipe 16.9, Recipe 16.12, Recipe 16.15, Recipe 17.1, Recipe 17.3, Recipe 17.4, Recipe 17.8 OID Generator Command (oidgen.exe) Tasks that can be accomplished: 582 Generate an object identifier to be used when creating new classes or attributes in the schema Type of tool: Command line Where to find it: Windows 2000 Resource Kit Recipes in which it is used: Recipe 10.3 Redirect Default Computers Command (redircmp.exe) Tasks that can be accomplished: Redirect the default computers container to another location in the directory tree Type of tool: Command line Where to find it: %SystemRoot%\System32 on Windows Server 2003 Recipes in which it is used: Recipe 8.12 Redirect Default Users Command (redirusr.exe) Tasks that can be accomplished: Redirect the default users container to another location in the directory tree Type of tool: 583 Command line Where to find it: %SystemRoot%\System32 on Windows Server 2003 Recipes in which it is used: Recipe 8.12 Reg Command (reg.exe) Tasks that can be accomplished: Query, add, delete, copy, save, restore, load, unload, compare, export, and import registry keys and values Type of tool: Command line Where to find it: Support Tools for Windows 2000 and Windows Server 2003 Recipes in which it is used: Recipe 3.23, Recipe 10.1, Recipe 11.16, Recipe 11.18, Recipe 11.20, Recipe 11.29, Recipe 12.4 , Recipe 12.9, Recipe 13.13, Recipe 13.14, Recipe 14.17, Introduction in Chapter 15 , Recipe 15.1, Recipe 15.3, Recipe 15.4, Recipe 16.9, Recipe 16.13 Registry Editor (regedit.exe) Tasks that can be accomplished: Browse, query, add, delete, rename, export, import, and copy registry keys and values Type of tool: Graphical User Interface 584 Where to find it: %SystemRoot%\System32 on Windows 2000 and Windows Server 2003 Recipes in which it is used: Recipe 3.22, Recipe 3.23, Recipe 11.17, Recipe 11.19, Recipe 11.21, Recipe 11.30, Recipe 12.5, Recipe 12.10, Recipe 14.18, Recipe 15.1, Recipe 15.2, Recipe 15.4, Recipe 15.5, Recipe 16.11, Recipe 16.14 Rename Domain Command (rendom.exe) Tasks that can be accomplished: Rename a domain (requires the Windows Server 2003 forest functional level) Type of tool: Command line Where to find it: http://www.microsoft.com/windowsserver2003/downloads/domainrename.mspx Recipes in which it is used: Recipe 2.8 Replication Diagnostics Command (repadmin.exe) Tasks that can be accomplished: Display the bridgeheads for a site, find the ISTG for a site, trigger the KCC, force replication to a partner, replicate a single object, force synchronization of a naming context, view the replication status of several domain controllers, show the differences between two domain controllers, view object metadata, obtain the up-to-dateness vector, and a variety of other replication management functions Type of tool: Command line 585 Where to find it: Support Tools for Windows 2000 and Windows Server 2003 Recipes in which it is used: Recipe 11.13, Recipe 11.22, Recipe 11.23, Recipe 11.25, Recipe 11.27, Recipe 12.1, Recipe 12.2, Recipe 12.3, Recipe 12.4, Recipe 12.8, Recipe 12.12, Recipe 17.7 Replication Monitor (replmon.exe) Tasks that can be accomplished: View the replication status of the naming contexts supported by a domain controller, force replication to a partner, force synchronization of a naming context, get the current USN, search a domain for replication errors, generate a detailed status report, and much more Type of tool: Graphical User Interface Where to find it: Support Tools for Windows 2000 and Windows Server 2003 Recipes in which it is used: Recipe 11.13, Recipe 12.3 Resultant Set of Policy Snap-in (rsop.msc) Tasks that can be accomplished: View the RSoP for a user and computer Type of tool: MMC snap-in Where to find it: 586 %SystemRoot%\System32 on Windows Server 2003 Recipes in which it is used: Recipe 9.20 SecEdit Command (secedit.exe) Tasks that can be accomplished: Refresh group policy settings, and analyze, configure, export and validate security settings Type of tool: Command line Where to find it: %SystemRoot%\System32 on Windows 2000 and Windows Server 2003 Recipes in which it is used: Recipe 9.21 Time Service (w32tm.exe) Tasks that can be accomplished: Configure and monitor the Windows Time Service Type of tool: Command line Where to find it: %SystemRoot%\System32 on Windows 2000 and Windows Server 2003 Recipes in which it is used: 587 Recipe 3.13 Unlock (unlock.exe) Tasks that can be accomplished: Find users that are locked out and unlock them Type of tool: Command line Where to find it: http://www.joeware.net/win32/zips/Unlock.zip Recipes in which it is used: Recipe 6.9 UUID Generator Command (uuidgen.exe) Tasks that can be accomplished: Generate a UUID/GUID that can be used when creating new classes and attributes Type of tool: Command line Where to find it: Windows 2000 Platform SDK Recipes in which it is used: Recipe 10.4 WinNT32 Command (winnt32.exe) 588 Tasks that can be accomplished: Upgrade a computer to Windows 2000 or Windows Server 2003; can also perform checks to determine if an upgrade is possible Type of tool: Wizard Where to find it: \i386 on Windows 2000 and Windows Server 2003 CD Recipes in which it is used: Recipe 2.12 589 Colophon Our look is the result of reader comments, our own experimentation, and feedback from distribution channels. Distinctive covers complement our distinctive approach to technical topics, breathing personality and life into potentially dry subjects. The animal on the cover of Active Directory Cookbook is a bluefin tuna (Thunnus thynnus), also known as a horse mackerel. It inhabits both the Atlantic and Pacific Oceans in temperate and subtropical waters. The body of a bluefin tuna is a metallic, deep blue on top, while the undersides and belly are silvery white. The first dorsal fin is yellow or blue; the second is red or brown. The rear fin and finlets are yellow, edged with black. The central caudal keel is black. The bluefin tuna is one of the largest and fastest species of marine fish. An adult can weigh as much as 1,500 pounds (680 kilograms), and can swim up to speeds of 55 miles per hour (88.5 kilometers per hour). A bluefin tuna can swim across the Atlantic Ocean in 40 days. Recent pop- up satellite tracking has revealed that the bluefin tuna can dive to depths greater than 3,000 feet in a matter of minutes and still maintain a body temperature of 77 degrees Fahrenheit (25 degrees Celsius), even in near-freezing water. Commercial fishing has reduced the stock of bluefin tuna to the extent that a single fish, once caught, can be worth up to $40,000 (U.S.). However, the situation is reversible, and the numbers of tuna could increase if the guidelines of the International Commission for the Conservation of Atlantic Tuna (ICCAT), an intergovernmental fishing organization that oversees tuna, are followed. Matt Hutchinson was the production editor for Active Directory Cookbook. Genevieve d'Entremont, Marlowe Shaeffer, and Darren Kelly provided quality control. Octal Publishing, Inc. provided production services. Ellie Volckhausen designed the cover of this book, based on a series design by Edie Freedman. The cover image is a 19th-century engraving from the Dover Pictorial Archive. Emma Colby produced the cover layout with QuarkXPress 4.1 using Adobe's ITC Garamond font. David Futato designed the interior layout. This book was converted by Julie Hawks to FrameMaker 5.5.6 with a format conversion tool created by Erik Ray, Jason McIntosh, Neil Walls, and Mike Sierra that uses Perl and XML technologies. The text font is Linotype Birka; the heading font is Adobe Myriad Condensed; and the code font is LucasFont's TheSans Mono Condensed. The illustrations that appear in the book were produced by Robert Romano and Jessamyn Read using Macromedia FreeHand 9 and Adobe Photoshop 6. The tip and warning icons were drawn by Christopher Bing. This colophon was written by Reg Aubry. The online edition of this book was created by the Safari production group (John Chodacki, Becki Maisch, and Madeleine Newell) using a set of Frame-to-XML conversion and cleanup tools written and maintained by Erik Ray, Benn Salter, John Chodacki, and Jeff Liggett. . accomplished: Rename a domain (requires the Windows Server 2003 forest functional level) Type of tool: Command line Where to find it: http://www.microsoft.com/windowsserver2003/downloads/domainrename.mspx . Windows 2000 or Windows Server 2003; can also perform checks to determine if an upgrade is possible Type of tool: Wizard Where to find it: i386 on Windows 2000 and Windows Server 2003 CD Recipes. Commission for the Conservation of Atlantic Tuna (ICCAT), an intergovernmental fishing organization that oversees tuna, are followed. Matt Hutchinson was the production editor for Active Directory Cookbook.