Resource Kit for Windows 2000 -------------------------------------------------------------------------------- Download only allowed with a valid license at your site. -------------------------------------------------------------------------------- Deploy | Manage | Migration | Network | Registry | Scripting | Security | Storage -------------------------------------------------------------------------------- Deploy |Back to Top Adsizer.exe - Active Directory Sizer Estimates the hardware required for deploying Active Directory in an organization. KSetup - Kerberos Setup KSetup is a command-line tool for configuring Windows 2000 Professional to use an MIT-based Kerberos realm instead of a Windows 2000 domain. KTPass - Kerberos Keytab Setup KtPass is a configuration tool for MIT Kerberos interoperability that allows an Administrator to configure a non-Windows 2000 Kerberos service as a security principal in the Windows 2000 Active Directory. KernProf - Kernel Profiler This command-line tool provides counters for and profiles of various functions of the Windows 2000 kernel. Install Monitor This command-line tool tracks changes made by Setup programs in any child processes they invoke, including changes to registry entries, files and .ini file entries. INSTSRV - Install Monitor Service Installer is a command-line tool that installs and uninstalls executable (.exe) services and assigns names to them. (Includes Service Installation Wizard - SRVINSTW) SetupMgr - Setup Manager This wizard is a deployment tool that assists system administrators in automating the installation or upgrading of Windows 2000 on multiple computers, eliminating the need to monitor these operations. SIDwalker This set of programs helps system administrators manage access-control policies on Windows 2000 and Windows NT systems. Access control is implemented by access-control lists (ACLs). SysDiff - Automated Installation Tool Using this tool, you can pre-install applications as part of an automated setup, including applications that do not support scripted installation. SysPrep Use this tool to prepare your system before changing SID usinf SIDwalter. -------------------------------------------------------------------------------- Management |Back to Top Active Directory Replication Monitor This utility graphically displays the replication topology of connections between servers on the same site. Active Directory Schema Manager The Schema Manager is a Microsoft Management Console (MMC) snap-in that allows you to view, modify, and extend the Active Directory schema. ADSI Edit ADSI Edit is a Microsoft Management Console (MMC) snap-in that acts as a low-level editor for the Active Directory. Add Users This 32-bit administrative tool for Windows 2000 uses a comma-delimited file to create, write, and delete user accounts. Add Users to a Group The UsrToGrp tool adds users to a local or global group according to information in a user-specified input text file. API Monitor This command-line tool monitors a running application for all Application Programming Interface (API) calls a process is making. Applications as Services Utility With Srvany, you can configure any Windows application so that it runs as a service. AuditPol AuditPol is a command-line tool that enables the user to modify the audit policy of the local computer or of any remote computer. ChgPrint - Change Printer Utility This tool assists network-administrators in managing printer shares. mains. Clipstor This GUI tool manages multiple Clipboard text buffers. It allows you to retrieve text from the Clipboard and store it in one of its buffers, and paste any of its buffers to the Clipboard, with your mouse. Cluster Verification Utility This tool verifies that two-node cluster systems are set up properly. Cusrmgr - Admin Account Changer Tool to Change Administrator Account Password on Multiple Computers. CustCon - Console Key Customizer Custcon.exe is a Windows 2000 GUI tool that is used to customize the extended line editing keys when using Cmd.exe (Ntconsole). To enable new key settings, click the "Use Extended Edit Keys" checkbox. Defptr - Default Printer Using this tool you can easily change your default printer, switching between available network or local printers. Delprof - User Profile Deletion Utility This tool deletes user profiles on computers running Windows 2000. Delsrv - Delete Service This command-line tool unregisters a service with the service control manager. DH - Display Heap DH (Display Heap) is a command-line tool to display information about heap usage for user-mode processes or pool usage in kernel-mode memory. DHCMP - DH Compare This command-line tool compares two dumps of heap usage from Dh.exe, matching the backtraces from each file, to find leaks. DomMon - Domain Monitor Domain Monitor monitors the status of servers in a domain and the secure channel status to the domain controller and to domain controllers in trusted domains. Drivers - List Loaded Drivers List Loaded Drivers displays character-based information about the installed device drivers. There are no command-line arguments. DSACLS This tool facilitates management of access-control lists for directory services. DSASTAT This diagnostic tool compares and detects differences between naming contexts on domain controllers. DumpEL - Dump Event Log Dump Event Log is a command-line tool that dumps an event log for a local or remote system into a tab-separated text file. ExCtrLst - Extensible Performance Counter List This tool provides information on the Extensible Performance Counter DLLs that have been installed on a computer running Windows 2000, listing the services and applications that provide performance information via the Windows 2000 registry. DxDiag - DirectX Diagnostic Tool This tool presents information about the components and drivers of the Microsoft® DirectX® application programming interface installed on your system. FindGrp - Find Group This tool finds all direct and indirect group memberships for a specified user in a domain. GetSID GetSID compares the user security IDs (SIDs) of two accounts. GetType GetType.exe is a command-line tool that allows you to detect what type of Windows software (workstation, server or domain controller) is installed on a computer. GetFlags - Global Flags Editor GFlags is a GUI tool that enables a developer or system administrator to edit the NtGlobalFlag settings for Windows 2000. Global This command-line tool displays members of global groups on remote servers or domains. GrpCpy - Group Copy This GUI tool enables users to copy the usernames in an existing group to another group in the same or another domain or on a computer running Windows 2000. IntBind - Interrupt Affinity Tool The Interrupt Affinity Tool is used on multiprocessor systems to affinitize interrupts of disk or network adapters to one or more processors. Kill - Task Killing Utility Use this command-line tool to end one or more tasks or processes. Use TLIST to find out the PID. Leakyapp This GUI testing tool appropriates system memory to see how other applications or the system as a whole runs in low-memory situations. LDP - Active Directory Administration Tool Ldp is a graphical tool that allows users to perform Lightweight Directory Access Protocol (LDAP) operations, such as connect, bind, search, modify, add, and delete, against any LDAP-compatible directory, such as the Active Directory. Link Check Wizard Link Check Wizard scans all of the link (shortcut) files on your system, and checks to see if the shortcut points to an existing application or document. LOCAL This command-line tool displays members of local groups on remote servers or domains. LogEvent - Event Logging Utility This tool enables you to make entries to the Event Log on either a local or remote computer from the command prompt or a batch file. LogTime This command-line tool logs the start or finish of command-line programs from a batch file. This can be useful for timing and tracking batch jobs such as mail-address imports. MemSnap - Memory Profiling Tool This memory profiling tool takes a snapshot of the memory resources being consumed by all running processes and writes this information to a log file. MoveTree - Active Directory Object Manager Movetree.exe is a command line tool that allows administrators to move Active Directory objects such as organizational units, users or computers between domains in a single forest. NetDom - Windows 2000 Domain Manager This tool enables administrators to manage Windows 2000 domains and trust relationships from the command line. Netsvc.exe - Command-line Service Controller You can use NetSvc to remotely start, stop, and query the status of services from the command line. NLMon This command-line tool can be used to list and test many aspects of trust relationships. NLTest This command-line tool helps perform network administrative tasks. NTDSUTIL - Directory Services Management Tool NtdsUtil performs database maintenance of the Active Directory store, management and control of the Floating Single Master Operations (FSMO), and cleaning up of metadata left behind by abandoned domain controllers, those which are removed from the network without being uninstalled. NTRights With this command-line tool, you can grant or revoke any Windows 2000 right to or from a user or group of users. NTUUCODE - 32-Bit UUDecode and UUEncode Utility You can use this 32-bit GUI program to encode or decode files according to the UUEncoding standard. > OH This command-line tool shows the handles of all open windows. > OLEVIEW - OLE/COM Object Viewer OLE/COM Object Viewer enables you to browse, configure, activate, and test all of the Microsoft Component Object Model (COM) classes installed on your computer. > PassProp This command-line tool can be used to set two domain policy flags: whether passwords have to be complex and whether the administrator account can be locked out. PathMan This command-line tool enables you to add or remove components of both the system and user paths. > PerfMetr - Performance Meter This command-line tool displays text-based information on the performance of a computer running Windows 2000. PermCopy This command-line tool copies share-level permissions (ACLs) from one share to another. PERMS - File Access Permissions per User Perms displays a user's access permissions for a specified file or set of files. PfMon - Page Fault Monitor This utility enables you to monitor the page faults that occur as you run an application. PMON - Process Resource Monitor PMon is a command-line tool that monitors process resource usage, tracking CPU and memory usage. Pstat - Process and Thread Status PStat is a character-based tool that lists all running processes and threads and displays their status. This tool is similar to Qslice.exe, but uses a command-line rather than a GUI interface. PrintMig - Printer Migrator This printer configuration tool allows you to back up or migrate any print server on which you have administrative rights. PTree - Process Tree Process Tree allows you to query the process inheritance tree and kill processes on local or remote computers. PViewer - Process Viewer Process Viewer is a Windows-based tool that displays information about a running process and allows you to stop (kill) processes and change process priority. Qslice - CPU Usage by Processes Quick Slice shows the percentage of total CPU usage for each process in the system. This tool is similar to Pstat.exe, but it presents the information in a graphical format. RASList This command-line tool displays Remote Access Service (RAS) server announces from a network. RASMon You can use this tool to monitor your Remote Access Service. RASUsers - Enumerating Remote Access Users RasUsers lets you list for a domain or a server all user accounts that have been granted permission to dial in to the network via Remote Access Service (RAS). ReMapKey - Remap Windows Keyboard Layout This tool changes keyboard layout by remapping the scancode of keys. The Remote Command Service (Rcmd.exe) provides a secure, robust way to remotely administer and run command-line programs. (RCMDSRV also included.) RKill - Remote Kill This service (RKILLSRV.EXE) with both GUI (WRKILL.EXE) and command-line (RKILL.EXE) clients allows a user to enumerate and kill processes on a remote computer. To kill a process remotely with this tool, you must be member of the Administrators group. RMTShare - Remote Share Remote Share is a command-line tool that allows you to set up or delete shares remotely. SC - Service Controller Query Tool This tool provides a way to communicate with Service Controller (Services.exe) from the command prompt to retrieve information about services. ScList This command-line tool can show currently running services, stopped services, or all services on a local or remote computer. SETX This command-line tool offers a batch method for setting environmental variables in the the user or computer environment from a variety of sources, without any programming or scripting. ShowGroups This command-line tool shows the groups to which a given user belongs, optionally within a given network domain. ShowMembers This command-line tool shows the usernames of members of a given group, optionally within a given network domain. ShutDown - Remote Shutdown Remote Shutdown is a command-line tool that allows you to remotely shut down or reboot a computer running Windows 2000. ShutGUI - Remote Shutdown GUI Shutgui.exe allows you to remotely shut down or reboot a computer running Windows 2000. It can be run either with command-line parameters or without. SrvCheck This command-line tool lists the non-hidden shares on an computer running Windows 2000 and enumerates the users on the ACLs for that share. SrvInfo This command-line tool displays information, such as available disk space and partition types, about a remote server. SU SU lets you start a process running as an arbitrary user. It is named after the SU (Switch Users) utility of the UNIX family of operating systems. SubInAcl With this command-line tool, administrators can obtain security information on files, registry keys, and services, and transfer this information from user to user, from local or global group to group, and from domain to domain. SvcMon - Service Monitoring Tool This tool monitors services on local and remote computers for changes in state (starting or stopping). Timezone - Daylight Savings Time Update Utility This command-line tool updates the daylight savings information for a time zone in the registry. TrustDom - Trust Domain Setup This command-line tool can help manage trust relationships. Using TrustDom, administrators can view, create, and delete trust relationships between Windows 2000 and Windows NT domains. TypePerf - Performnce Data in the Command Window This command-line tool displays real-time data from Performance Monitor counters in a command window. TZedit - Time Zone Editor You can use Time Zone Editor to create and edit time zone entries for the Date/Time option in Control Panel. UserDump - User Mode Process Dumper UserDump.exe is a command-line tool that creates a dump file for user mode debugging. UserDump does not use Dr. Watson and does not invade the target process as a debugger. UsrStat This command-line tool displays the username, full name, and last logon date and time for each user in a given domain. WinAt - Command Scheduler Command Scheduler can be used to schedule commands on a local or remote computer to occur once or regularly in the future. WinMsDp WinMsdp is a command-line version of the Windows 2000 Diagnostics tool (Winmsd.exe). It provides information about your system configuration and status. WinSCHK This command-line tool checks name and version-number inconsistencies that may appear in Windows Internet Name Service (WINS) databases, monitors replication activity, and verifies the replication topology in an enterprise network. It is particularly useful for WINS administrators. WINS Administrator Tools WinsCl can monitor WINS activities and examine WINS databases. It can also send commands to WINS to initiate an activity such as replication, scavenging, registering/querying a record, or doing backup/restore operations. -------------------------------------------------------------------------------- Migration |Back to Top Active Directory Migration Tool Helps you to Migrate to Active Directory. Active Directory Connector Allows Synchronization of Windows 2000 Active Directory and Exchange 5.5 Directory Service. This Tool is included on your Windows 2000 Server CD. Path : CDdrive:\valueadd\msft\mgmt\adc\setup.exe -------------------------------------------------------------------------------- Registry |Back to Top CompReg A Win32 character-based/command-line "Registry DIFF" that enables you to compare any two local or remote registry keys in Windows 2000, Windows NT, and Windows 95/98. FtEdit - FT Registry Information Editor FTEdit is a GUI tool that allows you to create, edit, and delete fault tolerance sets for disk drives and partitions of local and remote computers. REG This tool enables you to add, change, delete, search, backup, restore, and perform other operations on registry entries from the command prompt or a batch file. It can be used on both local and remote computers. REGBack - Registry Backup Registry Backup (RegBack) is a tool for backing up the Windows Registry to files without use of a tape drive. RegBack allows you to back up Registry hives while the system is running and has the hive files open. REGFind RegFind is a command-line tool with which you can search the Windows 2000 registry for arbitrary data, key names, or value names and optionally replace any of these with new values. REGINI - Registry Change by Script This tool uses character-based batch files to add keys to the Windows 2000 registry by specifying a registry script. REGRest - Registry Restoration Registry Restoration (RegRest) restores Registry hive files from backups created by RegBack. ScanReg This Win32 command-line "registry GREP" enables you to search for any string in keynames, valuenames, and/or valuedata in local or remote registry keys in Windows 2000 Windows NT, and Windows 95/98. -------------------------------------------------------------------------------- Scripting |Back to Top AutoExNT Service AutoExNT Service allows you to start a batch file, Autoexnt.bat, at boot time without having to log onto the computer on which it will run. Batch File Wait Sleep causes the computer to wait for a specified amount of time. ForFiles This command-line tool can be used in a batch file to select files in a folder or tree for batch processing. IfMember IfMember is a command-line utility that checks whether the current user is a member of a specified group. LogOff The LogOff tool is used to log a user off from the command prompt. NetCmd NetCmd.exe is a command-line tool that opens a command prompt. It automatically maps a UNC path to a drive letter. You can point to any folder in Windows Explorer (or any common file dialog) and open up a command prompt at that location. MUNGE This command-line tool provides a convenient way to search for and replace strings in a file or files. NOW Now displays the current date and time on STDOUT, followed by any command-line arguments you add. SOON - Near-Future Command Scheduler Soon schedules commands and programs to run in the near future on either the local or a remote computer, by generating and executing an appropriate AT command. TimeOut Timeout is a command-line tool that causes the command processor to pause execution for the number of seconds specified by the time (#) parameter, after which it continues without requiring a user keystroke. TimeThis TimeThis times how long it takes the system to execute a given command. User Input for Batch Files Choice prompts the user to make a choice in a batch program by displaying a prompt and pausing for the user to choose from among a set of keys. Remote Administration Scripts The Remote Administration Scripts are a collection of Visual Basic scripting tools designed to perform specific administrative tasks using Microsoft Active Directory Services Interfaces (ADSI) and Windows Management Instrumentation (WMI) for Windows 2000. Rscripts.chm is an HTML Help file that documents the Remote Administration Scripts. WaitFor This command-line tool waits until a signal is given across the network. Multiple machines can wait for the same signal. WhoAmI This command-line tool returns the domain or computer name and the username of the user who is currently logged onto the computer on which it is run. Winexit - Windows Exit Screen Saver WinExit is a screen saver that logs the current user off after the specified time has elapsed. -------------------------------------------------------------------------------- Security |Back to Top -------------------------------------------------------------------------------- Storage |Back to Top Associate This command-line tool enables you to register or unregister a file name extension with the registry. Delrp - Delete file and reparse points Delrp.exe is a command line tool deletes a file or directory and any associated NTFS reparse points. Dependency Walker Dependency Walker is a graphical Win32 development tool that scans any Win32 module (.exe, .dll, .ocx, .cpl, .scr, and .sys, among others) and builds a hierarchical tree diagram of all dependent modules. Dflayout - Compound File Layout User Tool This layout tool for document files enables you to optimize compound files for improved performance over low-bandwidth networks, such as the Internet. DirUse - Directory Disk Usage Directory Disk Usage shows disk space used per folder. You can use this utility to check how disk space is being used in users' home folders. DiskMap This command-line tool produces a detailed report on the configuration of the hard disk that you specify. DiskProbe DiskProbe is a sector editor for Windows 2000. It allows a user with local Administrator rights to directly edit, save and copy data on the physical hard drive that is not accessible in any other way. DiskUse DiskUse is a command-line tool that scans directories on a hard disk and reports on space used by each user. ExeType - Finding the Executable Type ExeType is a command-line application that identifies the operating system environment and processor required to run a particular executable file. Expand - File Expansion Utility This command-line tool enables you to expand files that have been compressed by Compress.exe . Extract - Extract Cabinet Extract.exe is a command line utility to extract individual files from compressed cabinet (.cab) files. File Compress This command-line tool can compress one or more files. FileVer This command-line tool examines the version resource structure of a file or a directory of files on either a local or remote computer and displays information on the versions of executable files such as .exe files and dynamic-link libraries DLLs. FlopLock - Lock Floppy Disk Drives FloppyLock is a service that controls access to the floppy drives of a computer. FreeDisk This command-line tool checks a disk drive for free space, returning a 0 if the specified amount of free space is available and a 1 if it is not. LINKD This command-line tool links an NTFS directory to a target object. LIST -Text Display and Search Tool This simple text display and search tool lists the contents of a file. Unlike other text display tools, List is a good tool for looking at large text or log files because it does not read the whole file into memory when you open it. NSS2DOC This utility helps the Remote Storage product in Windows 2000 Server migrate documents stored in the native structured storage (NSS) format to tertiary storage (tape). RSDiag - Remote Storage Diagnostic Utility This command-line tool examines Remote Storage (HSM) databases and displays diagnostic information about jobs, managed NTFS 5 volumes, removable media, and other Remote Storage information useful for system analysis. RSDir - Remote Storage File Information Utility This command-line tool examines Remote Storage reparse points, displaying Remote Storage information for files in the current directory and its subdirectories. SecAdd This command-line tool enables you to add user permissions to a registry key or removed "Everyone" group. ShowACLs This command-line tool enumerates access rights for files, folders, and trees. It allows masking to enumerate only specific ACLs. ShowDisk This command-line tool reads and displays the registry subkey HKEY_LOCAL_MACHINE\SYSTEM\DISK. TakeOwn TakeOwn is a command-line tool that cleans up multiple boot drives without formatting the drive. Using this tool, you can delete an installation of Window 2000 from a local computer. TextViewer TextViewer provides a graphical interface for quickly viewing text files on local or shared drives. Vfi - Visual File Information Visual File Information retrieves and generates file information. WinDiff - File and Directory Comparison WinDiff shows the differences between specified ASCII text files or folders of ASCII text files. -------------------------------------------------------------------------------- Network |Back to Top Browser Monitor Browser Monitor is a GUI tool that monitors the status of browsers on selected domains. Browsers are shown on a per-domain and per-transport basis. Browser Status BrowStat is a general purpose, character-based browser diagnostic tool. Use BrowStat to find out whether a browser is running and to find active Microsoft Windows for Workgroups (WFW) browsers in Windows 2000 and Windows NT domains. DHCPCMD - DHCP Administrator's Tool This command-line tool provides an auxiliary method of administering Dynamic Host Configuration Protocol (DHCP) servers. DHCPLOC DHCP Server Locator Utility DHCP Server Locator Utility displays the DHCP servers active on the subnet. If it detects any unauthorized DHCP servers, it beeps and sends out alert messages. DHCPOBJS - DHCP Objects DHCP Objects allows you to automate DHCP Server configuration. It also provides enhanced capabilites over the Dhcpcmd tool, such as the ability to remove a DHCP lease. DNSCMD - DNS Server Troubleshooting Tool Dnscmd.exe is a command line tool designed to assist administrators in DNS management. GetMAC GetMAC provides a quick method for obtaining the MAC (Ethernet) layer address and binding order for a computer running Windows NT Workstation or Windows NT Server (locally or across a network). IpSecPol IPSecPol is a command-line tool for configuring Internet Protocol Security (IPSec) policies in the Directory Service, or in a local or remote registry. NETAFX - Network Configuration Tool This tool can be used to configure a variety of network parameters from the command prompt. NetCons - Net Connections This GUI tool monitors and displays current net connections, taking the place of the Windows command-line command net use. NetDiag - Network Connectivity Tester This command-line diagnostic tool helps isolate networking and connectivity problems by performing a series of tests to determine the state of your network client and whether it is functional. NetWatch Net Watch shows which users are connected to shared folders. It also enables you to disconnect users and un-share folders. It can now simultaneously monitor multiple computers. PPTP Ping - Point-to-Point Tunneling Protocol Ping Tools Pptpclnt.exe and Pptpsrv.exe are tools that work in unison to verify that the required protocol and port for Point-to-Point Tunneling Protocol (PPTP) is being routed from a PPTP client to a PPTP server or vice-versa. SNMP Monitor SNMP Monitor is a tool that can monitor any SNMP MIB variables across any number of SNMP nodes. SNMPutil & SNMPutilG SNMP Browser is a tool that lets you get SNMP information from an SNMP host on your network. SnmpUtilG is a graphical tool that complements the older command prompt SNMP browser tool (Snmputil.exe). Windows ATM ARP Server Information Tool AtmArp is a command-line tool designed to assist network administrators and support personnel in troubleshooting the status of the Asynchronous Transfer Mode (ATM) ARP/MARS Service that ships with Windows 2000. Windows ATM LAN Emulation Client Information AtmLanE is a command-line tool designed to assist administrators in troubleshooting the status of the Asynchronous Transfer Mode (ATM) LAN Emulation (LANE) client that ships with Windows 2000.