Index

AD, claim types associated with, Discussion
adding new class to schema, Problem
changing default ACL for object class in schema, Problem
deactivating, Problem
default ACL for object class in schema, comparing to ACL of an object, Problem
dynamically linking auxiliary class to existing object instance, Problem
finding mandatory and optional attributes of, Problem
finding structural, auxiliary, abstract, and 88 classes, Problem
modifying default security, Problem
OID for new class, Problem
redefining, Problem
supported class types in AD schema, Discussion
viewing attributes of, Problem

classSchema objects, The Anatomy of a Forest, The Anatomy of Schema Objects, Discussion, Discussion

attributes of, The Anatomy of Schema Objects
creating, important attributes, Discussion
objectClassCategory attribute, Discussion

AD FS, Using a command-line interface, Using a graphical user interface

configuring alternate UPN suffix, Using a graphical user interface
generating a certificate request, Using a command-line interface

changing password for user, Discussion
creating new instance, Using a command-line interface
creating new replica of configuration set, Using a command-line interface on all versions
enabling auditing of access, Using a command-line interface
enabling or disabling a user, Using a command-line interface
extending the schema, Using a command-line interface
forcing replication, Using a graphical user interface
importing data into an instance, Problem
listing instances installed on a computer, Using a command-line interface
managing application partitions, Using a command-line interface
managing group memberships, Using a command-line interface
managing OUs, Using a command-line interface
managing permissions, Using a command-line interface
managing replication authentication, Using a graphical user interface
managing users, Using a graphical user interface
starting and stopping an instance, Using a command-line interface
viewing and modifying object attributes, Using a command-line interface

adding fields to AD Users and Computers, Using a command-line interface

application partitions, Using a command-line interface, Using a command-line interface, Using a command-line interface, Using a graphical user interface, Using a command-line interface, Using a command-line interface, Using a command-line interface, Using a graphical user interface, Using a graphical user interface

adding or removing replica server for, Using a command-line interface
creating and deleting, Using a command-line interface
delegating control of managing, Using a graphical user interface
finding in a forest, Using a command-line interface
finding replica servers for, Using a graphical user interface
hosted by a server, finding, Using a command-line interface
setting reference domain for, Using a graphical user interface
setting replication notification delay, Using a command-line interface
verifying correct instantiation on server, Using a command-line interface

backup and recovery, Problem, Problem, Using a command-line interface, Using the command-line interface, Using a command-line interface, Using a command-line interface, Using a command-line interface, Using a command-line interface, Problem

authoritative restore of object or subtree, Using a command-line interface
backing up the AD database, Problem
creating AD snapshot, Problem
creating reserve DIT file, Problem
mounting AD snapshot, Using a command-line interface
nonauthoritative restore of domain controller, Using a command-line interface
performing AD database recovery, Using a command-line interface
resetting DSRM administrator password, Using a command-line interface
restarting domain controller in DSRM, Using the command-line interface

adding or removing from a group, Using a command-line interface
binding to default container, Using a command-line interface
changing default container for, Using a graphical user interface
changing machine account quota, Using a command-line interface
creating, Using a command-line interface
creating computer for specific user or group, Using a command-line interface
deleting, Using a command-line interface
finding computers with particular OS, Using a graphical user interface
finding inactive or unused computers, Using a command-line interface
identifying computer role, Using a command-line interface
joining to a domain, Using a graphical user interface (steps specific to Windows 7, Windows 8, and Windows Server 2012)
listing all computer accounts in a domain, Using a graphical user interface
modifying attributes, Using a command-line interface
moving to different domain, Using a command-line interface
moving within same domain, Using a command-line interface
protecting against accidental deletion, Using a graphical user interface (steps specific to Windows Server 2008 and later)
renaming, Using a command-line interface
resetting computer account, Using a command-line interface
testing secure channel for, Problem
viewing RODCs that cached password, Using a graphical user interface

deleted objects, searching for, Using a command-line interface

DHCP, Using a command-line interface, Using a command-line interface

authorizing a DHCP server, Using a command-line interface
restricting administrators, Using a command-line interface

DIT maintenance, Using a command-line interface, Using a command-line interface, Problem, Using a command-line interface, Using a graphical user interface, Using a command-line interface, Using a command-line interface

checking integrity of DIT file, Using a command-line interface
determining amount of whitespace in DIT, Using a graphical user interface
determining size of DIT file, Using a command-line interface
moving DIT files, Using a command-line interface
offline defrag of DIT to reclaim space, Using a command-line interface
performing online defrag manually, Using a command-line interface
repairing or recovering the DIT, Problem

clearing DNS server cache, Using a command-line interface
computers using different domain suffix from AD domain, Using a command-line interface
configuring conditional forwarding, Using a graphical user interface
configuring forwarding, Using a command-line interface
configuring zone transfers, Using a command-line interface
converting zone to AD integrated zone, Using a graphical user interface
creating and deleting resource records, Using a command-line interface
creating forward lookup zone, Using a command-line interface
creating reverse lookup zone, Using a command-line interface
delegating control of AD integrated zone, Using a command-line interface
deregistering DC’s resource records, Using a command-line interface
enabling DNS server debug logging, Using a command-line interface
modifying DNS server configuration, Using a command-line interface
moving AD integrated zones into application partition, Using a graphical user interface
preventing DC from dynamically registering resource records, Problem, Using a command-line interface
querying resource records, Using a graphical user interface
registering DC’s resource records, Discussion
scavenging old resource records, Using a graphical user interface
verifying DC can register its resource records, Using a command-line interface
viewing server’s zones, Using a graphical user interface

domain controllers, Using a command-line interface, Using a command-line interface, Problem, Solution, Problem, Using PowerShell, Using a command-line interface, Problem, Using a command-line interface, Problem, Using a command-line interface, Problem, Using a command-line interface, Discussion, Problem, Using a command-line interface, Using PowerShell, Solution

configuring to use external time source, Discussion
finding closest, Using a command-line interface
finding DC or GC servers in a site, Using PowerShell
finding DCs and GCs via DNS, Solution
finding for a domain, Using PowerShell
finding number of logon attempts for, Problem
finding services advertised by, Problem
finding site for, Problem
increasing LSASS cache, Using a command-line interface
modifying password caching policy on all RODCs, Using a command-line interface
modifying Password Replication Policy on RODC, Using a command-line interface
moving to different site, Using a command-line interface
removing, Solution
renaming, Problem
resetting TCP/IP stack, Problem, Using a command-line interface
restoring deleted DC in Windows Server 2012, Using a command-line interface
verifying promotion of, Problem

domains, Using a command-line interface, Using a command-line interface, Using a command-line interface

finding duplicate SIDs, Using a command-line interface
finding NetBIOS name of, Using a command-line interface
removing orphaned domain, Using a command-line interface

Exchange Server 2013, Using a command-line interface, Using a command-line interface, Using a command-line interface, Using a graphical user interface, Using a command-line interface

creating unattended installation files for, Using a command-line interface
installing first server, Using a command-line interface
installing management tools, Using a graphical user interface
preparing Active Directory for Exchange, Using a command-line interface
stopping and starting, Using a command-line interface

finding disabled users, Using a graphical user interface

finding duplicate SIDs in a domain, Using a command-line interface

finding locked-out users, Using a command-line interface

finding users with passwords nearing expiration, Problem

forests, Using a graphical user interface

creating UPN suffix for, Using a graphical user interface

FSMO roles, Using a command-line interface, Using a command-line interface, Using a command-line interface, Using a command-line interface, Problem

finding holders of FSMO roles, Using a command-line interface
finding PDC Emulator role owner via DNS, Problem
seizing, Using a command-line interface
transferring a role, Using a command-line interface
transferring to different DC, Using a command-line interface

garbage collection interval, changing, Using a command-line interface

global catalog, Using a command-line interface, Using a command-line interface, Using a command-line interface

checking if DC promotion is complete, Using a command-line interface
enabling and disabling, Using a command-line interface
enumerating GC servers in a forest, Using a command-line interface

Group Policy Management Console sample scripts, Managing GPOs

applying security filter to, Using a graphical user interface
backing up, Using a graphical user interface
copying, Using a graphical user interface
creating, Using a graphical user interface
creating migration table for, Using a graphical user interface
deleting, Using a graphical user interface
editing fine-grained password policy, Using a command-line interface
finding GPOs in a domain, Using a command-line interface
importing settings into, Using a graphical user interface
listing links for, Using a graphical user interface
refreshing settings on a computer, Using a command-line interface
restoring, Using a graphical user interface
restoring default GPO, Using a command-line interface
reviewing settings, Using a graphical user interface
viewing effective PSO for a user, Using a graphical user interface
viewing RSoP, Using a command-line interface

groups, Using a graphical user interface, Using a graphical user interface, Using a graphical user interface, Using a graphical user interface, Using a command-line interface, Using a command-line interface, Using a command-line interface, Using a graphical user interface, Using a command-line interface, Using a graphical user interface, Using a graphical user interface, Using a graphical user interface, Using a command-line interface

adding and removing members, Using a command-line interface
applying fine-grained password policy to, Using a command-line interface
changing scope or type of, Using a graphical user interface
creating, Using a graphical user interface
delegating control for managing membership, Using a graphical user interface
enabling universal group membership caching, Using a graphical user interface
modifying attributes, Using a command-line interface
moving to another domain, Using a command-line interface
moving within a domain, Using a command-line interface
protecting against accidental deletion, Using a graphical user interface
viewing direct members of, Using a graphical user interface
viewing nested members of, Using a graphical user interface
viewing permissions of, Using a graphical user interface

help information for tools, Command-Line Tools

LDIF and ldifde utility, Getting Familiar with LDIF

logging, Using a graphical user interface, Using a command-line interface, Using a graphical user interface, Using a graphical user interface

enabling diagnostics logging, Using a graphical user interface
enabling GPO client logging, Using a graphical user interface
enabling Kerberos logging, Using a graphical user interface
enabling NetLogon logging, Using a command-line interface

logging number of expired tombstone objects, Using a graphical user interface

monitoring, Using a graphical user interface, Using a command-line interface, Using a command-line interface

using STATS control to view LDAP query statistics, Using a command-line interface
viewing DNS server performance statistics, Using a graphical user interface
Windows Time Service, Using a command-line interface

connecting to object GUID, Using a graphical user interface
counting in Active Directory, Using a command-line interface
creating an object, Using a command-line interface
creating dynamic object, Using a command-line interface
deleting an object, Using a command-line interface
deleting container with child objects, Using a command-line interface
displaying RootDSE object, Using a command-line interface
dynamically linking auxiliary class to existing object instance, Using a command-line interface
exporting to CSV file, Using a command-line interface
importing using LDIF file, Using a command-line interface
modifying an object, Using a command-line interface
modifying default LDAP query policy, Using a command-line interface
modifying default TTL settings for dynamic objects, Using a command-line interface
moving to different OU or container, Using a command-line interface
refreshing a dynamic object, Using a command-line interface
renaming an object, Using a command-line interface
searching for large number of, Using a graphical user interface
searching for, in a domain, Using a command-line interface
searching the global catalog, Using a command-line interface
searching with attribute-scoped query, Using a command-line interface
searching with bitwise filter, Using a command-line interface
using LDAP controls, Using a command-line interface
viewing attributes, Using a command-line interface
viewing created and last-modified timestamps, Using a command-line interface

organizational units, Using a command-line interface, Using a command-line interface, Using a graphical user interface, Using a command-line interface, Using a command-line interface, Using a command-line interface, Using a command-line interface, Using a command-line interface, Using a command-line interface, Using a command-line interface, Using a command-line interface, Using a command-line interface, Using a graphical user interface

assigning or removing manager, Using a command-line interface
creating an OU, Using a command-line interface
deleting an OU, Using a command-line interface
deleting objects in an OU, Using a command-line interface
determining number of child objects, Using a command-line interface
enumerating objects in an OU, Using a command-line interface
enumerating OUs in a domain, Using a command-line interface
finding an OU, Using a graphical user interface
modifying an OU, Using a command-line interface
moving an OU, Using a command-line interface
moving objects between OUs, Using a command-line interface
protecting against accidental deletion, Using a graphical user interface
renaming an OU, Using a command-line interface

quotas, Problem, Problem, Using a command-line interface, Using a command-line interface, Using a command-line interface

assigned to security principal, finding, Problem
changing tombstone weight in quotas, Using a command-line interface
creating, Problem
finding usage for security principals, Using a command-line interface
setting default for security principals, Using a command-line interface

replaceable text in examples, Replaceable Text

replication, Using a command-line interface, Using a command-line interface, Using a command-line interface, Using a graphical user interface, Using a command-line interface, Using a command-line interface, Using a command-line interface, Using a graphical user interface, Using a command-line interface, Using a command-line interface, Using a command-line interface, Using a command-line interface, Using a command-line interface, Using a command-line interface

changing inter-site replication interval, Using a command-line interface
changing intra-site replication notification interval, Using a command-line interface
checking for potential problems, Using a command-line interface
determining if domain controllers are in sync, Using a command-line interface
disabling inter-site compression of traffic, Using a graphical user interface
enabling and disabling on DCs, Using a command-line interface
enabling strict or loose consistency, Using a command-line interface
finding conflict objects from collisions, Using a command-line interface
finding orphaned objects, Using a command-line interface
forcing from one DC to another, Using a graphical user interface
listing replication partners for a DC, Using a command-line interface
viewing object metadata, Using a command-line interface
viewing status for domain controllers, Using a command-line interface
viewing unreplicated changes between DCs, Using a command-line interface

running tools with alternate credentials, Running Tools with Alternate Credentials

adding attribute to Read-Only Filtered Attribute Set (RO-FAS), Problem
adding new attribute, Using a command-line interface
adding new class, Using a command-line interface
copying attributes when duplicating a user, Using a command-line interface
deactivating classes and attributes, Using a command-line interface
finding classes, Using a command-line interface
finding linked attributes, Using a command-line interface
finding mandatory and optional attributes of a class, Using a command-line interface
finding nonreplicated and constructed attributes, Using a command-line interface
indexing an attribute, Using a command-line interface
managing confidentiality bit, Problem
managing Schema Master FSMO, Using a command-line interface
modifying attributes included in ANR, Using a command-line interface
modifying attributes stored on global catalog, Using a graphical user interface
modifying default security of a class, Using a graphical user interface
reloading the cache, Using a command-line interface
viewing a class, Using a graphical user interface
viewing an attribute, Using a command-line interface

security and authentication, Using a command-line interface, Using a command-line interface, Using a command-line interface, Using a graphical user interface, Discussion, Using a command-line interface, Using a command-line interface, Discussion, Problem, Using a command-line interface, Using a graphical user interface, Problem

changing ACL of an object, Using a command-line interface
comparing ACL of object to default defined in schema, Discussion
configuring permission inheritance, Using a command-line interface
delegation of control over objects, Using a command-line interface
forcing Kerberos to use TCP, Using a graphical user interface
LDAP signing and encryption, tools supporting, Using a command-line interface
resetting object’s ACL to default in schema, Problem
revoking delegated permissions, Using a command-line interface
viewing access tokens, Problem
viewing ACL for an object, Using a graphical user interface
viewing and purging Kerberos tickets, Using a command-line interface
viewing effective permissions on an object, Discussion