book

Windows® Command-Line Administrators Pocket Consultant, Second Edition

Name: Windows® Command-Line Administrators Pocket Consultant, Second Edition
Author: William R. Stanek
ISBN: 9780735622623

by William R. Stanek

June 2010

Intermediate to advanced

592 pages

16h 38m

English

Microsoft Press

Read now

Unlock full access

Windows® Command-Line Administrator's Pocket Consultant, Second Edition
Acknowledgments
Introduction
Who Is This Book For?How Is This Book Organized?Conventions Used in This BookSupport
I. Windows Command-Line Fundamentals
1. Overview of the Windows Command Line
Command Line EssentialsUnderstanding the Windows Command ShellUnderstanding the MS-DOS Command ShellUnderstanding Windows PowerShellConfiguring Command-Line PropertiesWorking with the Command HistoryMaking Supplemental Components AvailableUsing the Microsoft Remote Server Administration Tools for Windows VistaRegistering the Remote Server Administration Tools PackageConfiguring and Selecting Remote Server Administration ToolsRemoving the Remote Server Administration ToolsRemoving the Remote Server Administration Tools Package
2. Getting the Most from the Command Line
Managing Command Shell StartupWorking with the Command PathManaging the Command PathManaging File Extensions and File AssociationsRedirecting Standard Input, Output, and ErrorRedirecting Standard Output to Other CommandsRedirecting I/O to and from FilesRedirecting Standard ErrorChaining and Grouping CommandsUsing Chains of CommandsGrouping Command Sequences
3. Command-Line Scripting Essentials
Creating Command-Line ScriptsCommon Statements and Commands for ScriptsClearing the Command-Shell WindowAdding Comments to ScriptsManaging Text Display and Command EchoingFine-Tuning Command Echo with @Setting the Console Window Title and ColorsPassing Arguments to ScriptsGetting Acquainted with VariablesUsing Variables in ScriptsNaming VariablesSetting Variable ValuesSubstituting Variable ValuesLocalizing Variable ScopeUsing Mathematical ExpressionsWorking with Arithmetic and Assignment OperatorsUnderstanding Operator PrecedenceSimulating ExponentsCommand-Line Selection StatementsUsing IfUsing If NotUsing If Defined and If Not DefinedNesting IfsMaking Comparisons in If StatementsCommand Line Iteration StatementsIteration EssentialsStepping Through a Series of ValuesIterating Through Groups of FilesIterating Through DirectoriesParsing File Content and OutputCreating Subroutines and ProceduresUsing SubroutinesUsing Procedures
II. Windows Systems Administration Using the Command Line
4. Deploying Windows Servers
Managing Server ConfigurationsWorking with Roles, Role Services, and FeaturesManaging Roles, Role Services, and FeaturesServerManagerCmd EssentialsQuerying Installed Roles, Role Services, and FeaturesInstalling Roles, Role Services, and FeaturesRemoving Roles, Role Services, and Features
5. Managing Windows Systems
Examining System InformationWorking with the RegistryUnderstanding Registry Keys and ValuesQuerying Registry ValuesComparing Registry KeysSaving and Restoring Registry KeysAdding Registry KeysCopying Registry KeysDeleting Registry KeysExporting and Importing Registry KeysLoading and Unloading Registry KeysManaging System ServicesViewing Configured ServicesStarting, Stopping, and Pausing ServicesConfiguring Service StartupConfiguring Service LogonConfiguring Service RecoveryRestarting and Shutting Down Systems from the Command LineManaging Restart and Shutdown of Local SystemsManaging Restart and Shutdown of Remote SystemsAdding Shutdown or Restart Reasons and Comments

6. Event Logging, Tracking, and Monitoring.
Windows Event LoggingViewing and Filtering Event LogsViewing EventsFiltering EventsWriting Custom Events to the Event LogsCreating and Using Saved QueriesMonitoring Performance: The EssentialsUnderstanding Performance Monitoring at the Command LineTracking Performance Data
7. Monitoring Processes and Maintaining Performance
Managing Applications, Processes, and PerformanceUnderstanding System and User ProcessesExamining Running ProcessesObtaining Detailed Information on ProcessesViewing the Relationship Between Running Processes and ServicesViewing Lists of DLLs Being Used by ProcessesFiltering Task List OutputMonitoring System Resource Usage and ProcessesStopping ProcessesDetecting and Resolving Performance Issues Through MonitoringMonitoring Memory Paging and Paging to DiskMonitoring Memory Usage and the Working Memory Set for Individual ProcessesResolving Performance Bottlenecks
8. Managing Event and Performance Logging
Managing the Event LogsGetting Started with WevtutilListing Available Logs and Registered PublishersViewing and Changing Log ConfigurationExporting and Manipulating Event LogsClearing Event LogsCentralizing Event Logging Across the EnterpriseConfiguring Event Forwarding and CollectionCreating SubscriptionsManaging SubscriptionsPerformance LoggingGetting Started with Data Collector SetsWorking with Data Collector SetsCollecting Performance Counter DataConfiguring Performance Counter AlertsViewing Data Collector Reports
9. Scheduling Tasks to Run Automatically
Scheduling Tasks on Local and Remote SystemsIntroducing Task SchedulingMonitoring Scheduled TasksScheduling Tasks with Task SchedulerCreating Basic TasksCreating Advanced TasksManaging Task PropertiesEnabling and Disabling TasksCopying Tasks to Other ComputersRunning Tasks ImmediatelyRemoving Unwanted TasksScheduling Tasks with SchtasksCreating Scheduled Tasks with Schtasks /CreateCreating Scheduled Tasks Triggered by Windows EventsChanging Scheduled Tasks with Schtasks /ChangeQuerying for Configured Tasks with Schtasks /QueryCreating Tasks Using XML Configuration FilesRunning Tasks Immediately with Schtasks /RunStopping Running Tasks with Schtasks /EndDeleting Tasks with Schtasks /Delete
III. Windows File System and Disk Administration Using the Command Line
10. Configuring and Maintaining Disks
Getting Started with DiskPartDiskPart BasicsDiskPart: An ExampleUnderstanding Focus and What It MeansDiskPart Commands and ScriptsDiskPart: A Script ExampleInstalling and Managing Hard Disk DrivesInstalling and Checking for a New DriveChecking Drive Status and ConfigurationChanging Drive Partition StylesMBR and GPT Partition StylesConverting Partition Table StylesWorking with Basic and Dynamic DisksUnderstanding Basic and Dynamic DisksSetting the Active PartitionChanging the Disk Type: Basic to Dynamic or Vice VersaConverting a Basic DiskConverting a Dynamic DiskMaintaining DisksObtaining Disk Information and Managing File Systems with FSUtilFSUtil: An OverviewUsing FSUtilChecking Disks for Errors and Bad SectorsAnalyzing a Disk Without Repairing ItFixing Disk ErrorsControlling Auto Check on StartupDetermining Auto Check StatusConfiguring Auto Check ParametersDefragmenting DisksUnderstanding and Using DefragUnderstanding and Using DefragPerforming Defrag Analysis Only
11. Partitioning Basic Disks
Obtaining Partition InformationCreating PartitionsCreating Partitions for MBR DisksCreating Primary PartitionsCreating Extended Partitions with Logical DrivesCreating Partitions for GPT DisksCreating EFI System PartitionsCreating Microsoft Reserved PartitionsCreating Primary PartitionsCreating LDM Metadata and LDM Data PartitionsManaging Drive Letters and Mount PointsAssigning Drive Letters or Mount PointsChanging Drive Letters or Mount PointsRemoving Drive Letters or Mount PointsFormatting PartitionsUsing FORMATUsing FILESYSTEMSFormatting: An ExampleManaging PartitionsConverting a Partition or Volume to NTFSConversion: Preliminary ChecksHandling Basic ConversionsUsing the CvtArea ParameterChanging or Deleting the Volume LabelShrinking Partitions or VolumesExtending Partitions or VolumesDeleting Partitions
12. Managing Volumes and RAID on Dynamic Disks
Obtaining Volume Information and StatusCreating and Managing Simple VolumesCreating Simple VolumesExtending Simple VolumesBringing Dynamic Disks OnlineDeleting VolumesProviding Fault Tolerance with RAID on Dynamic DisksImplementing RAID-0: Disk StripingUsing RAID-0Configuring the Stripe SetImplementing RAID-1: Disk Mirroring and DuplexingUsing RAID-1Configuring Mirroring or DuplexingImplementing RAID-5: Disk Striping with ParityUsing RAID-5Configuring Disk Striping with ParityManaging RAID and Recovering from FailureBreaking a Mirrored SetResynchronizing and Repairing a Mirrored SetRepairing a RAID-0 Striped Set Without ParityRegenerating a RAID-5 Striped Set with Parity
IV. Windows Active Directory Administration Using the Command Line
13. Core Active Directory Services Administration
Controlling Active Directory from the Command LineUnderstanding Domains, Containers, and ObjectsUnderstanding Logical and Physical Structures in Active DirectoryUnderstanding Distinguished NamesGetting Started with the Active Directory Command-Line ToolsMaking Directory Queries Using the DSQUERY CommandDSQUERY Subcommands and SyntaxSearching Using Names, Descriptions, and SAM Account NamesSetting Logon and Run As Permissions for SearchesSetting the Start Node, Search Scope, and Object LimitSetting the Output Format for NamesUsing DSQUERY with Other Active Directory Command-Line ToolsSearching for Problem User and Computer AccountsRenaming and Moving ObjectsRemoving Objects from Active Directory
14. Managing Computer Accounts and Domain Controllers
Overview of Managing Computer Accounts from the Command LineCreating Computer Accounts in Active Directory DomainsCreating a Computer AccountCustomizing Computer Account Attributes and Group MembershipsManaging Computer Account PropertiesViewing and Finding Computer AccountsSetting or Changing a Computer's Location or Description AttributeDisabling and Enabling Computer AccountsResetting Locked Computer AccountsJoining Computer Accounts to a DomainRenaming Computers and Computer AccountsMoving Computer AccountsDeleting Computer AccountsWorking with Domain ControllersInstalling and Demoting Domain ControllersFinding Domain Controllers in Active DirectoryDesignating Global Catalog ServersFinding Global Catalog ServersAdding or Removing a Global CatalogChecking Caching Settings and Global Catalog PreferencesDesignating Operations MastersFinding Operations MastersConfiguring Operations Master Roles Using the Command LineFinding Read-Only Domain Controllers
15. Managing Active Directory Users and Groups
Overview of Managing User Accounts from the Command LineAdding User AccountsCreating Domain User AccountsCustomizing Domain User Account Attributes and Group MembershipsCreating Local User AccountsManaging User AccountsViewing and Finding User AccountsDetermining Group Membership for Individual User AccountsSetting or Changing User Account AttributesDisabling and Enabling User AccountsResetting Expired User AccountsControlling and Resetting User PasswordsMoving User AccountsRenaming User AccountsDeleting User AccountsOverview of Managing Group Accounts from the Command LineAdding Group AccountsCreating Security and Distribution GroupsCreating a Local Group and Assigning MembersManaging Group AccountsViewing and Finding Group AccountsDetermining Group MembershipChanging Group Type or ScopeAdding, Removing, or Replacing Group MembersAdding Members to a GroupRemoving Members from a GroupReplacing All Members in a GroupMoving Group AccountsRenaming Group AccountsDeleting Group Accounts
V. Windows Network Administration Using the Command Line
16. Administering Network Printers and Print Services
Obtaining Support and Troubleshooting Information for PrintersWorking with Printers at the Command LineTracking Print Drivers and Printer InformationGetting Detailed Print Statistics for Capacity Planning and TroubleshootingManaging PrintersInstalling Physically Attached Print DevicesInstalling Network-Attached Print DevicesListing Printers Configured on a ComputerViewing and Setting the Default PrinterRenaming PrintersDeleting PrintersManaging TCP/IP Ports for Network-Attached PrintersCreating and Changing TCP/IP Ports for PrintersListing Information About TCP/IP Ports Used by PrintersDeleting TCP/IP Ports Used by PrintersConfiguring Printer PropertiesAdding Comments and Location InformationSharing PrintersPublishing Printers in Active DirectorySetting a Separator Page and Changing Print Device ModeScheduling and Prioritizing Print JobsConfiguring Spooling and Other Advanced Printer OptionsSolving Spooling ProblemsChecking the Print Spooler ServiceFixing a Corrupted SpoolerManaging Print Queues and Individual Print JobsViewing Jobs in the QueuePausing the Printer and Resuming PrintingEmptying the Print QueuePausing, Resuming, and Restarting Individual Document PrintingRemoving a Document and Canceling a Print JobBacking Up and Restoring Print Server ConfigurationsBacking Up Print Server ConfigurationsRestoring Print Server ConfigurationsMigrating Printers and Print Queues
17. Configuring, Maintaining, and Troubleshooting TCP/IP Networking
Using the Network Services ShellWorking with Netsh ContextsWorking with Remote ComputersWorking with Script FilesManaging TCP/IP SettingsConfiguring IPv4Setting a Static IPv4 AddressSetting a Dynamic IPv4 AddressAdding IPv4 Addresses and GatewaysSetting DNS Servers to Use for IPv4Specifying Additional DNS Servers to UseSetting WINS Servers to UseSpecifying Additional WINS Servers to UseDeleting IPv4 Address Resolution Protocol CacheDeleting TCP/IPv4 SettingsConfiguring IPv6Setting IPv6 AddressesSetting DNS Servers to Use for IPv6Deleting TCP/IPv6 SettingsSupporting TCP/IP NetworkingObtaining and Saving the TCP/IP ConfigurationExamining IP Address and Interface ConfigurationsWorking with TCP Internet Control and Error MessagesExamining Fragmentation, Reassembly, and Error DetailsExamining Current TCP and UDP ConnectionsWorking with TCPWorking with UDPTroubleshooting TCP/IP NetworkingViewing Diagnostic InformationDiagnosing General Computer Configuration IssuesDiagnosing IP, DNS, and WINS Configuration IssuesTrace the route to 192.168.1.100:Try to estalish a connection to Mailsever23 by its host name:Trace the route to Mailserver23.cpandl.com and provide packet loss information:
A. Essential Command-Line Tools Reference
ARPASSOCATTRIBBCDEditCACLSCallCDCHDIRCHKDSKCHKNTFSChoiceCipherClipCLSCMDCMDKeyColorCompCompactConvertCopyDateDCDIAGDCGPOFIXDEFRAGDELDIRDiskcompDiskcopyDiskpartDOSKeyDriverQueryDSADD ComputerDSADD GroupDSADD UserDSGET ComputerDSGET GroupDSGET ServerDSGET UserDSMGMTDSMOD ComputerDSMOD GroupDSMOD ServerDSMOD UserDSMOVEDSQUERY ComputerDSQUERY ContactDSQUERY GroupDSQUERY PartitionDSQUERY QuotaDSQUERY ServerDSQUERY SiteDSQUERY UserDSQUERY *DSRMEchoEndlocalEraseESENTUTLEventCreateExitExpandFCFindFindStrFORForfilesFormatFTPFTYPEGET-EventlogGET-ProcessGET-ServiceGETMACGOTOGPUPDATEHOSTNAMEICACLSIFIPCONFIGLABELMDMKDIRMOREMOUNTVOLMoveNBTSTATNET AccountsNET ComputerNET Config ServerNET Config WorkstationNET ContinueNET FileNET GroupNET LocalgroupNET PauseNET PrintNET SessionNET ShareNET StartNET StatisticsNET StopNET TimeNET UseNET UserNET ViewNETDOM AddNETDOM ComputernameNETDOM JoinNETDOM MoveNETDOM MOVENT4BDCNETDOM QueryNETDOM RemoveNETDOM RenamecomputerNETDOM ResetNETDOM ResetPwdNETDOM TrustNETDOM VerifyNETSHNETSTATNSLOOKUPPATHPATHPINGPAUSEPINGPOPDPrintPromptPUSHDRDRecoverREG AddREG CompareREG CopyREG DeleteREG QueryREG RestoreREG SaveREGSVR32REMRENRMDIRRouteRunasSC ConfigSC ContinueSC FailureSC PauseSC QCSC QFAILURESC QuerySC StartSC StopSchtasks /ChangeSchtasks /CreateSchtasks /DeleteSchtasks /EndSchtasks /QuerySchtasks /RunSERVERMANAGERCMDSETSET-ServiceSETLOCALSFCSHIFTShutdownSortStartSTOP-ProcessStop-ServiceSUBSTSYSTEMINFOTAKEOWNTASKKILLTASKLISTTIMETIMEOUTTITLETRACERPTTRACERTTYPETYPEPERFVERVERIFYVOLWAITFORWBADMINWHEREWHOAMI
B. Quick Reference for Netsh
NetshNetsh AdvfirewallNetsh BridgeNetsh DhcpNetsh DhcpclientNetsh FirewallNetsh HttpNetsh InterfaceNetsh IpsecNetsh LanNetsh NapNetsh NetioNetsh NpsNetsh P2pNetsh RasNetsh RoutingNetsh RpcNetsh WinhttpNetsh WinsNetsh WinsockNetsh Wlan
Index
About the Author
Copyright

Content preview from Windows® Command-Line Administrators Pocket Consultant, Second Edition

Chapter 8. Managing Event and Performance Logging

Proactively maintaining and monitoring systems is an important part of any administrator's job. Unfortunately, most administrators don't have time to perform routine maintenance and monitoring of all the systems for which they are responsible. For this reason, I'm going to dig even deeper into automated maintenance and monitoring, showing you techniques that you can use to reduce the administrative workload and save time.

In the previous chapters, I've shown you how to track and work with the event logs, how to automate monitoring, how to monitor processes, and how to troubleshoot performance issues. Now let's look at techniques you can use to manage the way logging is performed, centralize event ...

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.

Julian F.

Head of Cybersecurity

I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.

Addison B.

Field Engineer

I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.

Amir M.

Data Platform Tech Lead

I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.

Mark W.

Embedded Software Engineer

Windows 10 for Enterprise Administrators

Publisher Resources

ISBN: 9780735622623Catalog Page Errata

Cloud Computing

Data Engineering

Data Science

AI & ML

Programming Languages

Software Architecture

IT/Ops

Security

Design

Business

Soft Skills

Windows® Command-Line Administrators Pocket Consultant, Second Edition

by William R. Stanek

Chapter 8. Managing Event and Performance Logging

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.