Active Directory Specific Windows Support Tools

By Author: Anny Brwon
Total Articles: 59
Comment this article

Used to Sdcheck.exe: Security Descriptor Check Utility
Search.vbs: Active Directory Search Tool1
Setspn.exe: Manipulate Ser-vice Principal Names for Accounts1
SIDwalker Security Administration Tools
Display the security descriptor for any object stored in Active Directory. This tool enables an administrator to determine if ACLs are being inherited correctly and if ACL changes are being replicated from one domain controller to another.
Perform searches against an LDAP server to get information from Active Directory.
Read, modify, and delete the Service Principal Names (SPN) directory property for an Active Directory service account.
Manage access control policies on Windows Server 2003 and Windows NT systems. SID walker consists of three separate
programs: Showaccs.exe1 and Siclwalk.exe1 for examining and changing access control entries, and Security Migration Editor for editing apping between old and new security identifiers (SIDs).
1.command-line tool
2. MMC snap-in
3.GUI tool
See Windows Support Tools help for more information about using the Windows Support ...
... Tools that pertain to Active Directory.
Active Directory Service Interfaces (ADSI) provides a simple, powerful, object-oriented interface to Active Directory. ADSI makes it easy for CompTIA Nerwork+ Exam and administrators to create programs utilizing directory services by using high-level tools such as Microsoft Visual Basic, Java, C, C# or Visual C++ as well as scripted languages such as VBScript, JScript, or PerlScript without having to worry about the underlying differences between the different namespaces. ADSI is a fully programmable Automation object for use by administrators.
ADSI enables you to build or buy programs that give you a single point of access to multiple directories in your network environment, whether those directories are based on free Microsoft exam papers or another protocol.
Note A detailed discussion of ADSI is beyond the scope of this training kit. For further information about ADSI, refer to the Microsoft Windows Server 2003 Resource Kit located on the Microsoft Web site at resourcekitmspx.
In this practice, you view the Active Directory administrative consoles and some of the Active Directory support tools.
Exercise 1: Viewing Active Directory Administrative Consoles
In this exercise, you view the Active Directory administrative consoles.
To view Active Directory administrative consoles
1.Log on to Server Ol as Administrator,
2.Click Start, point to Administrative Tools, and then click Active Directory Domains and Trusts.
3.In the console tree, right-click the contoso.com domain and then select Properties.
In the Properties dialog box for the contoso.com domain, click the Trusts tab.
Notice the trust information boxes that would contain information about trusts if
there were other domains in the forest. Click Cancel.
4.In the console tree, right-click the contoso.com domain and then select Raise.Domain Functional Level. On the Raise Domain Functional Level dialog box,notice the list in which you can raise domain functionality. Click Cancel. In the console tree, right-click the Active Directory Domains And Trusts node and the select Raise Forest Functional Level. On the Raise Forest Functional Level dialog
box, notice that you cannot raise forest functionality until you have raised the domain functional level to Windows Server 2003. Click OK.
5.In the console tree, right-click the Active Directory Domains And Trusts node and then select Properties. On the UPN Suffixes tab, notice where you can enter alter nate UPN suffixes. Click OK and then close the Active Directory Domains And Trusts console.
6.Click Start, point to Administrative Tools, and then click Active Directory Sites And Services. In the console tree, double-click the Sites folder. Notice that a site called IT Exams is present. This site is created automatically when Active Directory is installed. Close the Active Directory Sites And Services console.
7.Click Start, point to Administrative Tools, and then click Active Directory Users
And Computers. In the console tree, double-click the Builtin folder and examine all the default groups. Double-click the Users folder and examine all the default users. Close the Active Directory Users And Computers console.