Microsoft Active Directory tools and trouble shooting

MS Utils

Install from CD ROM support tools

• CSV (use csvde util)
• Ldife Util - LDIF = an industry standard LDAP data interchange format for exchanging data between LDAP directories (can also be used to modify the schema - Exchange uses this)
• ADMT = Active Directory Migration Tool
• Dsacls util (support tools)
• LDP
• Delegwiz.inf
• Kerbtray -auditing of security
• Ntdsutil (advanced changes to the directory services)
• ADSI edit - directly view and modify objects and attributes
• AD Sites and Services Util - Making a DC a GC you must look into a tool that has scope across the forest, and this one does
• Dsacles Utility lets you list who has what rights, or also to set rights programmatically
• SECEDIT /refreshpolicy machine_policy ex4.3 step 16
• NLtest - Netlogon test- puts results in netlogon.log (helps when trying to figure out why neltogon can't find Domain controllers at logon time
• Netdom verify [workstation name] - verifies that a secure chanell to the domain controller exists ( found under Support tools on XP CD-ROM - see pg 5-39 crse 559)
• Kerbtray - launches the kerberose ticket tray in the system tray (green ticket to click on and view ticket credentials (kerberous failures could be the result of a time-skew)
• Net helpmsg [insert help message # from log file that you convert from hex to decimal]
• Ntdsutil - pg 559-6-19 (for metadata cleanup (Knowledgebase articles Q216498 Q230306
• ADsizer - to estimat the size of an AD
• Repadmin - look at USN's (use this command to view the high water markrepadmin /showvector dc=example,dc=com server02.example.com)
• Ntfrsutl - ntfrsutl forcerepl command to enforce replication regardless of the predefined replication schedule.