Resource Page
CIS 2154 Syllabus CIS
2154 Schedule Chapter Lesson Notes: 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12
Additional Study Topics: Utilities | Groups | Migration Issues | RIS
Tools and Utilities
Active Directory Replication Monitor
(ReplMon)
$ view the low-level status of Active Directory
replication
$ force synchronization between Dcs
$ view the topology in a graphical format
$ monitor the status and performance of domain
controller replication
$ status report - provides a comprehensive report
of the replication configuration
$ record and view history of replication status
per-directory partition per=replication partner
$ view servers with which the computer is
replicating both directly and transitively
$ display whether or not a monitored server is a
Global Catalog server
$ right-click a server object in ReplMon and can
use a metadata option
$ in the server properties you can view
connection objects
Replication Diagnostics Tools (RepAdmin.exe)
$ diagnose replication problems between W2K Dcs
$ view replication topology as seen from the
perspective of each DC
$ in some cases can be used to manually create
the replication topology
$ check to determine if the replica information
is up-to-date
$ force replication between domain controllers
$ view the replication metadata
$ view up-to-dateness vectors
$ view the connection objects for a domain
controller
$ force replication between DCs
Active Directory Administration Tool
(Ldp.exe)
$ allows users to perform LDAP operations such as
connect, bind, search, modify, add, and delete, against any LDAP-compatible directory
$ can be sued to view objects stored in Active
Directory, but not the complete replication topology
Security Descriptor Check Utility
(Sdcheck.exe)
$ displays the security descriptor for any object
stored in Active Directory
$ security descriptor - contains the ACLs
defining the permissions that users have on objects stored in Active Directory
ACL Diagnostics Tool (ACLDiag.exe)
$ helps diagnose ant troubleshoot problems with
permissions on Active Directory objects
$ reads security attributes from the ACLs and outputs the information in a readable format
Dsacls.exe
$ allows management of ACLs for directory
services
$ query and manipulate security attributes on
Active Directory objects
Dsastat
$ used to compare directory information on Dcs
and detect differences
$ examine the directory partitions and to detect
any differences
Dcdiag
$ analyzes the state of domain controllers in a
forest or enterprise and reports any problems
$ designed to be an end-user reporting program
that captures the detailed knowledge of how to dientify abnormal behavior in the computer
$ useful in testing for domain controller
consistency
Dnscmd.exe
$ allows an administrator to view the properties
of the DNS servers, the DNS zone, and the DNS resource records
$ used to modify any of these properties of the
DNS server
Dnsstat.exe
$ similar to dnscmd.exe
$ used in WNT
Netdom
$ manage W2K domains and trust relationships
$ join W2K computers to a WNT 4.0 or W2K domain
or OU
$ move member servers and workstations from
$ establish trust relationships between domains
$ manage trust relationships between domains
$ manage computer accounts for domain member
workstations and member servers
$ verify and/or reset the secure channel
$ ID existing trust structures
Ntdsutil
$ remove orphaned domain controllers
$ remove orphaned domains
$ repair, check, compact, move, and dump the
directory database files
$ list site, domains, and server information
$ manage operations masters
$ perform authoritative restores
$ create domains
Netdiag.exe
$ used to isolate networking and connectivity
problems
$ performs a series fo tests to determine the
state of the network client
Nltest.exe
$ helps the administrator perform network
administrative tasks
$ getting a list of Dcs
$ forcing a shutdown
$ testing trust relationships
$ testing the state of the domain controllers