CIS2154.gif (11090 bytes)

Resource Page    CIS 2154 Syllabus    CIS 2154 Schedule    Chapter Lesson Notes: 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12
Additional Study Topics:  Utilities | Groups | Migration Issues | RIS
 

Tools and Utilities

 

Active Directory Replication Monitor (ReplMon)

$       view the low-level status of Active Directory replication

$       force synchronization between Dcs

$       view the topology in a graphical format

$       monitor the status and performance of domain controller replication

$       status report - provides a comprehensive report of the replication configuration

$       record and view history of replication status per-directory partition per=replication partner

$       view servers with which the computer is replicating both directly and transitively

$       display whether or not a monitored server is a Global Catalog server

$       right-click a server object in ReplMon and can use a metadata option

$       in the server properties you can view connection objects

 

Replication Diagnostics Tools (RepAdmin.exe)

$       diagnose replication problems between W2K Dcs

$       view replication topology as seen from the perspective of each DC

$       in some cases can be used to manually create the replication topology

$       check to determine if the replica information is up-to-date

$       force replication between domain controllers

$       view the replication metadata

$       view up-to-dateness vectors

$       view the connection objects for a domain controller

$       force replication between DCs

 

Active Directory Administration Tool (Ldp.exe)

$       allows users to perform LDAP operations such as connect, bind, search, modify, add, and delete, against any LDAP-compatible directory

$       can be sued to view objects stored in Active Directory, but not the complete replication topology

 

Security Descriptor Check Utility (Sdcheck.exe)

$       displays the security descriptor for any object stored in Active Directory

$       security descriptor - contains the ACLs defining the permissions that users have on objects stored in Active Directory

 

ACL Diagnostics Tool (ACLDiag.exe)

$       helps diagnose ant troubleshoot problems with permissions on Active Directory objects

$       reads security attributes from the ACLs and outputs the information in a readable format

 

Dsacls.exe

$       allows management of ACLs for directory services

$       query and manipulate security attributes on Active Directory objects

 

Dsastat

$       used to compare directory information on Dcs and detect differences

$       examine the directory partitions and to detect any differences

 

Dcdiag

$       analyzes the state of domain controllers in a forest or enterprise and reports any problems

$       designed to be an end-user reporting program that captures the detailed knowledge of how to dientify abnormal behavior in the computer

$       useful in testing for domain controller consistency

 

Dnscmd.exe

$       allows an administrator to view the properties of the DNS servers, the DNS zone, and the DNS resource records

$       used to modify any of these properties of the DNS server

 

Dnsstat.exe

$       similar to dnscmd.exe

$       used in WNT

 

Netdom

$       manage W2K domains and trust relationships

$       join W2K computers to a WNT 4.0 or W2K domain or OU

$       move member servers and workstations from

$       establish trust relationships between domains

$       manage trust relationships between domains

$       manage computer accounts for domain member workstations and member servers

$       verify and/or reset the secure channel

$       ID existing trust structures

 

Ntdsutil

$       remove orphaned domain controllers

$       remove orphaned domains

$       repair, check, compact, move, and dump the directory database files

$       list site, domains, and server information

$       manage operations masters

$       perform authoritative restores

$       create domains

 

Netdiag.exe

$       used to isolate networking and connectivity problems

$       performs a series fo tests to determine the state of the network client

 

Nltest.exe

$       helps the administrator perform network administrative tasks

$       getting a list of Dcs

$       forcing a shutdown

$       testing trust relationships

$       testing the state of the domain controllers

1