Microsoft® Windows® 2000 Security Handbook

Tools from the Windows 2000 Resource Kit

Knowing the tools in the resource kit is a must for every administrator who wants to manage the network, especially the ones related to Active Directory. Here I describe some of them; for a complete reference, check the help available in the resource kit snap-in:

• LDP.EXE— This tool graphically performs LDAP operations such as view, add, or modify data. Useful in troubleshooting.

• ADSI Edit— With this, you can low-level edit objects of the Active Directory. You can view, add, modify, and even move objects.

• DSASTAT.EXE— This is good as a diagnostic tool because it compares and detects the differences between naming contexts (or directory partitions) on domain controllers.

• NTDSUTIL.EXE— Although this is ...