Ntdsutil
a command-line tool that provides management facilities for Active Directory Domain Services (AD DS)
How would you create a snapshot and mount it?
Snapshot:
Mount Snapshot:
Connecting to Snapshot:
dsamain /dbpath C:$SNAP_(DateTime)_volumeC$\windows\ntds\ntds.dit /ldapport 5000
How do you unmount a snapshot?
UnMount:
How do you reset the DSRM Admin Password?
To Reset the DSRM Administrator Password
How do you create install media for a DC?
ntdsutil
activate instance ntds
ifm
create sysvol full <drive>:\<installationmediafolder></installationmediafolder></drive>
What does the following PowerShell CmdLet Do?
Add-ADCentralAccessPolicyMember
Adds central access rules to a central access policy in Active Directory.
What does the following PowerShell CmdLet Do?
Add-ADComputerServiceAccount
Adds one or more service accounts to an Active Directory computer.
What does the following PowerShell CmdLet Do?
Add-ADDomainControllerPasswordReplicationPolicy
Adds users, computers, and groups to the allowed or denied list of a read-only domain controller password replication policy.
What does the following PowerShell CmdLet Do?
Add-ADFineGrainedPasswordPolicySubject
Applies a fine-grained password policy to one more users and groups.
What does the following PowerShell CmdLet Do?
Add-ADGroupMember
Adds one or more members to an Active Directory group.
What does the following PowerShell CmdLet Do?
Add-ADPrincipalGroupMembership
Adds a member to one or more Active Directory groups.
What does the following PowerShell CmdLet Do?
Add-ADResourcePropertyListMember
Adds one or more resource properties to a resource property list in Active Directory.
What does the following PowerShell CmdLet Do?
Clear-ADAccountExpiration
Clears the expiration date for an Active Directory account.
What does the following PowerShell CmdLet Do?
Clear-ADClaimTransformLink
Removes a claims transformation from being applied to one or more cross-forest trust relationships in Active Directory.
What does the following PowerShell CmdLet Do?
Disable-ADAccount
Disables an Active Directory account.
What does the following PowerShell CmdLet Do?
Disable-ADOptionalFeature
Disables an Active Directory optional feature.
What does the following PowerShell CmdLet Do?
Enable-ADAccount
Enables an Active Directory account.
What does the following PowerShell CmdLet Do?
Enable-ADOptionalFeature
Enables an Active Directory optional feature.
What does the following PowerShell CmdLet Do?
Get-ADAccountAuthorizationGroup
Gets the accounts token group information.
What does the following PowerShell CmdLet Do?
Get-ADAccountResultantPasswordReplicationPolicy
Gets the resultant password replication policy for an Active Directory account.
What does the following PowerShell CmdLet Do?
Get-ADAuthenticationPolicy
Gets one or more Active Directory Domain Services authentication policies.
What does the following PowerShell CmdLet Do?
Get-ADAuthenticationPolicySilo
Gets one or more Active Directory Domain Services authentication policy silos.
What does the following PowerShell CmdLet Do?
Get-ADCentralAccessPolicy
Retrieves central access policies from Active Directory.
What does the following PowerShell CmdLet Do?
Get-ADCentralAccessRule
Retrieves central access rules from Active Directory.