554 Appendix A • MCSA Command-Line Reference Table A.21 dsquery site Parameters Switch Function -o {dn | rdn } Specifies the output format for the search results. -name Name Searches for objects whose CN attributes match the specified value. -desc Description Searches for objects whose descriptions match the specified value. -r Specifies the search to use recursion or follow referrals during the search process. -gc Specifies that the search is to use the Global Catalog. -limit NumberOfObjects Specifies a limit to the number of matches that are returned for the search. dsquery server The dsquery server command is used query Active Directory for information about domain con- trollers and uses the following syntax: dsquery server [-o {dn | rdn}] [-forest] [-domain DomainName] [-site SiteName] [-name Name] [-desc Description] [-hasfsmo {schema | name | infr | pdc | rid}] [-isgc] [{-s Server | -d Domain}] [-u UserName] [-p {Password | *}] [-q] [-r] [-gc] [-limit NumberOfObjects] [{-uc | -uco | -uci}] Table A.22 details the parameters associated with the dsquery server command. Table A.22 dsquery server Parameters Switch Function -o {dn | rdn } Specifies the output format for the search results. -forest Searches for all domain controllers in the current forest. -domain DomainName Searches for all domain controllers in the specified domain. -site SiteName Searches for all domain controllers in the specified site. -name Name Searches for objects whose CN attributes match the specified value. -desc Description Searches for objects whose descriptions match the specified value. -hasfsmo {schema | Searches for the domain controller(s) that hold the specified opera- name | infr | pdc | rid} tions master role. -isgc Searches for all domain controllers specified in the scope that are Global Catalog servers. -r Specifies the search to use recursion or follow referrals during the search process. www.syngress.com Continued 271_70-292_AppxA.qxd 8/22/03 4:24 PM Page 554 MCSA Command-Line Reference • Appendix A 555 Table A.22 dsquery server Parameters Switch Function -gc Specifies that the search is to use the Global Catalog. -limit NumberOfObjects Specifies a limit to the number of matches that are returned for the search. dsquery user The dsquery user command is used query Active Directory for information about users and uses the following syntax: dsquery user [{StartNode | forestroot | domainroot}] [-o {dn | rdn | upn | samid}] [-scope {subtree | onelevel | base}] [-name Name] [-desc Description] [-upn UPN] [-samid SAMName] [-inactive NumberOfWeeks] [-stalepwd NumberOfDays] [-disabled] [{-s Server | -d Domain}] [-u UserName] [-p {Password | *}] [-q] [-r] [-gc] [-limit NumberOfObjects] [{-uc | -uco | -uci}] Table A.23 details the parameters associated with the dsquery user command. Table A.23 dsquery user Parameters Switch Function StartNode | forestroot | Specifies where the search should start. domainroot -o {dn | rdn | upn | Specifies the output format for the search results. samid } -scope {subtree | Specifies the scope of the search. onelevel | base} -name Name Searches for objects whose CN attributes match the specified value. -desc Description Searches for objects whose descriptions match the specified value. -upn UPN Searches for objects whose UPN matches the specified value. -samid SAMName Searches for objects whose SAM names match the specified value. -inactive NumberOfWeeks Searches for inactive users for the specified time value. stalepwd NumberOfDays Searches for users that have not changed their password for the specified time value. -disabled Searches for users with disabled accounts. -r Specifies the search to use recursion or follow referrals during the search process. www.syngress.com Continued 271_70-292_AppxA.qxd 8/22/03 4:24 PM Page 555 556 Appendix A • MCSA Command-Line Reference Table A.23 dsquery user Parameters Switch Function -gc Specifies that the search is to use the Global Catalog. -limit NumberOfObjects Specifies a limit to the number of matches that are returned for the search. dsquery quota The dsquery quota command is used query Active Directory for information about quota speci- fications and uses the following syntax: dsquery quota {domainroot | ObjectDN} [-o {dn | rdn}] [-acct Name] [-qlimit Filter] [-desc Description] [{-s Server | -d Domain}] [-u UserName] [-p {Password | *}] [-q] [-r] [-gc] [-limit NumberOfObjects] [{-uc | -uco | -uci}] Table A.24 details the parameters associated with the dsquery quota command. Table A.24 dsquery quota Parameters Switch Function domainroot | ObjectDN Specifies where the search should start. -o {dn | rdn } Specifies the output format for the search results. -acct Name Specifies the search to locate quota specifications assigned to the specified security principal. -qlimit Filter Searches for quota limits that match a specified value. -desc Description Searches for objects whose descriptions match a specified value. -r Specifies the search to use recursion or follow referrals during the search process. -gc Specifies that the search is to use the Global Catalog. -limit NumberOfObjects Specifies a limit to the number of matches that are returned for the search. dsquery partition The dsquery partition command is used query Active Directory for information about partition objects and uses the following syntax: dsquery partition [-o {dn | rdn}] [-part Filter] [{-s Server | -d Domain}] [-u UserName] [-p {Password | *}] [-q] [-r] [-gc] [-limit NumberOfObjects] [{-uc | -uco | -uci}] www.syngress.com 271_70-292_AppxA.qxd 8/22/03 4:24 PM Page 556 MCSA Command-Line Reference • Appendix A 557 Table A.25 details the parameters associated with the dsquery partition command. Table A.25 dsquery partition Parameters Switch Function -o {dn | rdn } Specifies the output format for the search results. -part Filter Searches for partition objects whose common name matches the specified value. -r Specifies the search to use recursion or follow referrals during the search process. -gc Specifies that the search is to use the Global Catalog. -limit NumberOfObjects Specifies a limit to the number of matches that are returned for the search. dsquery * The dsquery * command is used query Active Directory for information about objects using the specified criteria for an LDAP query and uses the following syntax: dsquery * [{ObjectDN | forestroot | domainroot}] [-scope {subtree | onelevel | base}] [-filter LDAPFilter] [-attr {AttributeList | *}] [-attrsonly] [-l] [{-s Server | -d Domain}] [-u UserName] [-p {Password | *}] [-q] [-r] [-gc] [-limit NumberOfObjects] [{-uc | -uco | -uci}] Table A.26 details the parameters associated with the dsquery * command. Table A.26 dsquery * Parameters Switch Function ObjectDN | forestroot | domainroot Specifies where the search should start. -scope {subtree | onelevel | base} Specifies the scope of the search. -filter LDAPFilter Specifies an explicit LDAP search filter. -attr {AttributeList | *} Specifies the attributes to display in the search output. -attrsonly Specifies the attribute types to display in the search output. -l Specifies search output to be displayed in a list instead of table format. -r Specifies that the search is to use recursion or follow referrals during the search process. -gc Specifies that the search is to use the Global Catalog. -limit NumberOfObjects Specifies a limit to the number of matches that are returned for the search. www.syngress.com 271_70-292_AppxA.qxd 8/22/03 4:24 PM Page 557 558 Appendix A • MCSA Command-Line Reference dsget The dsget command can be used to display the selected properties of Active Directory objects. dsget has the following top-level options: ■ dsget computer ■ dsget contact ■ dsget group ■ dsget ou ■ dsget site ■ dsget server ■ dsget user ■ dsget subnet ■ dsget site ■ dsget quota ■ dsget partition dsget computer The dsget computer command is used display the properties of a specified computer in Active Directory and has two possible usage variations.The first allows you to view the properties for multiple computers, while the second allows you to view the membership information for a single computer.The dsget computer command uses the following syntax: dsget computer ComputerDN [-dn] [-samid] [-sid] [-desc] [-loc] [-disabled] [{-s Server | -d Domain}] [-u UserName] [-p {Password | *}] [-c] [-q] [-l] [{-uc | -uco | -uci}] [-part PartitionDN [-qlimit] [-qused]] dsget computer ComputerDN [-memberof [-expand]] [{-s Server | -d Domain}] [-u UserName] [-p {Password | *}] [-c] [-q] [-l] [{-uc | -uco | -uci}] Table A.27 details the parameters associated with the dsget computer command. Table A.27 dsget computer Parameters Switch Function ComputerDN Specifies the distinguished name of the computer information you want to view. -dn Displays the distinguished name of the computer. www.syngress.com Continued 271_70-292_AppxA.qxd 8/22/03 4:24 PM Page 558 MCSA Command-Line Reference • Appendix A 559 Table A.27 dsget computer Parameters Switch Function -samid Displays the SAM account name of the computer. -sid Displays the SID of the computer. -desc Searches for objects whose description matches the specified value. -loc Displays the location of the computer. -disabled Searches for computers with disabled accounts. -l Specifies search output to be displayed in a list instead of a table format. -c Specifies the command is to continue processing in the event of an error. -part PartitionDN Connects to the specified directory partition. -qlimit Displays the quota limit in place on the object. -qused Displays the quota used by the object. -memberof Displays the group memberships of the computer. -expand Specifies that group recursion is to occur when locating groups the computer is a member of. dsget contact The dsget contact command is used display the properties of a specified contact in Active Directory and uses the following syntax: dsget contact ContactDN [-dn] [-fn] [-mi] [-ln] [-display] [-desc] [-office] [-tel] [-email] [-hometel] [-pager] [-mobile] [-fax] [-iptel] [-title] [-dept] [-company] [{-s Server | -d Domain}] [-u UserName] [-p {Password | *}] [-c] [-q] [-l] [{-uc | -uco | -uci}] Table A.28 details the parameters associated with the dsget contact command. Table A.28 dsget contact Parameters Switch Function ContactDN Specifies the distinguished name of the contact information you want to view. -dn Displays the distinguished name of the contact. -fn Displays the first name of the contact. -mi Displays the middle initial of the contact. -ln Displays the last name of the contact. -display Displays the display name of the contact. -desc Displays the description of the contact. www.syngress.com Continued 271_70-292_AppxA.qxd 8/22/03 4:24 PM Page 559 560 Appendix A • MCSA Command-Line Reference Table A.28 dsget contact Parameters Switch Function -office Displays the office location of the contact. -tel Displays the telephone number of the contact. -email Displays the e-mail address of the contact. -hometel Displays the home telephone number of the contact. -pager Displays the pager phone number of the contact. -mobile Displays the mobile phone number of the contact. -fax Displays the fax phone number of the contact. -iptel Displays the IP phone number of the contact. -title Displays the title of the contact. -dept Displays the department of the contact. -company Displays the company name of the contact. -c Specifies the command is to continue processing in the event of an error. -l Specifies search output to be displayed in a list instead of a table format. dsget group The dsget grouip command is used to display the properties of a specified group in Active Directory and has two possible variations in usage.The first allows you to view the properties for multiple groups, while the second allows you to view the membership information for a single group.The dsget group command uses the following syntax: dsget group GroupDN [-dn] [-samid] [-sid] [-desc] [-secgrp] [-scope] [{-s Server | -d Domain}] [-u UserName] [-p {Password | *}] [-c] [-q] [-l] [{-uc | -uco | -uci}] [-part PartitionDN [-qlimit] [-qused]] dsget group GroupDN [{-memberof | -members}] [-expand] [{-s Server | -d Domain}] [-u UserName] [-p {Password | *}] [-c] [-q] [-l] [{-uc | -uco | -uci}] Table A.29 details the parameters associated with the dsget group command. Table A.29 dsget group Parameters Switch Function GroupDN Specifies the distinguished name of the group information you want to view. -dn Displays the distinguished name of the group. -samid Displays the SAM account name of the group. www.syngress.com Continued 271_70-292_AppxA.qxd 8/22/03 4:24 PM Page 560 MCSA Command-Line Reference • Appendix A 561 Table A.29 dsget group Parameters Switch Function -sid Displays the SID of the group. -desc Searches for objects whose description matches the specified value. -secgrp Displays whether or not the group is a security group. -scope Displays information about the scope of the group. -l Specifies search output to be displayed in a list instead of a table format. -part PartitionDN Connects to the specified directory partition. -qlimit Displays the object quota limit. -qused Displays the quota used by the object. -memberof Displays the group memberships of the group. -members Displays the objects that are members of the group. -expand Specifies that group recursion occurs when locating groups the group is a member of. -c Specifies the command is to continue processing in the event of an error. dsget ou The dsget ou command is used display the properties of a specified OU in Active Directory and uses the following syntax: dsget ou OrganizationalUnitDN [-dn] [-desc] [{-s Server | -d Domain}] [-u UserName] [-p {Password | *}] [-c] [-q] [-l] [{-uc | -uco | -uci}] Table A.30 details the parameters associated with the dsget ou command. Table A.30 dsget ou Parameters Switch Function OrganizationalUnitDN Specifies the distinguished name of the OU information you want to view. -dn Displays the distinguished name of the OU. -desc Displays the description of the OU. -c Specifies the command is to continue processing in the event of an error. -l Specifies the search output is displayed in a list instead of a table format. www.syngress.com 271_70-292_AppxA.qxd 8/22/03 4:24 PM Page 561 562 Appendix A • MCSA Command-Line Reference dsget server The dsget server command is used display the properties of a specified domain controller in Active Directory and has three possible usage variations.The first allows you to view the gen- eral properties for the specified domain controller, the second allows you to display a listing of security principals who own the largest number of objects in the directory, and the third allows you to display a listing of the directory partitions on the specified domain controller.The dsget server command uses the following syntax: dsget server ServerDN [-dn] [-desc] [-dnsname] [-site] [-isgc] [{-s Server | -d Domain}] [-u UserName] [-p {Password | *}] [-c] [-q] [-l] [{-uc | -uco | -uci}] dsget server ServerDN [{-s Server | -d Domain}] [-u UserName] [-p {Password | *}] [-c] [-q] [-l] [{-uc | -uco | -uci}] [-topobjowner Display] dsget server ServerDN [{-s Server | -d Domain}] [-u UserName] [-p {Password | *}] [-c] [-q] [-l] [{-uc | -uco | -uci}] [-part PartitionDN] Table A.31 details the parameters associated with the dsget server command. Table A.31 dsget server Parameters Switch Function ServerDN Specifies the distinguished name of the domain controller information you want to view. -dn Displays the distinguished name of the domain controller. -desc Displays the description of the domain controller. -dnsname Displays the DNS host name of the domain controller. -site Displays the site in which the domain controller is located. -isgc Displays whether or not the domain controller is a Global Catalog server. -l Specifies the search output is displayed in a list instead of a table format. -topobjowner Displays a listing of the security principals that own the largest number of Display directory objects on the server. -part Connects to the specified directory partition. PartitionDN -c Specifies the command is to continue processing in the event of an error. www.syngress.com 271_70-292_AppxA.qxd 8/22/03 4:24 PM Page 562 MCSA Command-Line Reference • Appendix A 563 dsget user The dsget user command is used display the properties of a specified group in Active Directory and has two possible variations in usage.The first allows you to view the properties for multiple users, while the second allows you to view the group membership information for a single user. The dsget user command uses the following syntax: dsget user UserDN [-dn] [-samid] [-sid] [-upn] [-fn] [-mi] [-ln] [-display] [-empid] [-desc] [-office] [-tel] [-email] [-hometel] [-pager] [-mobile] [-fax] [-iptel] [-webpg] [-title] [-dept] [-company] [-mgr] [-hmdir] [-hmdrv] [-profile] [-loscr] [-mustchpwd] [-canchpwd] [-pwdneverexpires] [-disabled] [-acctexpires] [-reversiblepwd] [{-uc | -uco | -uci}] [-part PartitionDN [-qlimit] [-qused]] dsget user UserDN [-memberof] [-expand] [{-uc | -uco | -uci}] Table A.32 details the parameters associated with the dsget user command. Table A.32 dsget user Parameters Switch Function UserDN Specifies the distinguished name of the user information you want to view. -dn Displays the distinguished name of the user. -samid Displays the SAM name of the user. -upn Displays the user principal name of the user. -sid Displays the SIDs of the user. -fn Displays the first name of the user. -mi Displays the middle initial of the user. -ln Displays the last name of the user. -display Displays the display name of the user. -empid Displays the employee ID of the user. -desc Displays the description of the user. -office Displays the office location of the user. -tel Displays the telephone number of the user. -email Displays the e-mail address of the user. -hometel Displays the home telephone number of the user. -pager Displays the pager phone number of the user. -mobile Displays the mobile phone number of the user. -fax Displays the fax phone number of the user. www.syngress.com Continued 271_70-292_AppxA.qxd 8/22/03 4:24 PM Page 563 [...]... LDAPAttributeList] [-g] [-m] [-n] [-k] [-a UserDistinguishedName Password] [-b UserName Domain Password] www.syngress.com 271 _70- 292 _ AppxA.qxd 8/22/03 4:24 PM Page 5 69 MCSA Command-Line Reference • Appendix A Table A. 39 details the parameters associated with the csvde and ldifde commands Table A. 39 csvde/ldifde Parameters Switch Function Basic Global Parameters -i -f FileName -s ServerName -c String1 String2 -v... [/slave|/noslave] Table A. 49 details the parameters associated with the dnscmd /resetforwarders command Table A. 49 dnscmd /resetforwarders Parameters Switch Function IPAddress Specifies the list of IP addresses that the DNS server will forward unresolved queries Continued www.syngress.com 271 _70- 292 _ AppxA.qxd 8/22/03 4:24 PM Page 583 MCSA Command-Line Reference • Appendix A Table A. 49 dnscmd /resetforwarders... uses the following syntax: dnscmd [ServerName] /ageallrecords ZoneName NodeName [/tree]|[/f] Table A. 39 details the parameters associated with the dnscmd /ageallrecords command www.syngress.com 571 271 _70- 292 _ AppxA.qxd 572 8/22/03 4:24 PM Page 572 Appendix A • MCSA Command-Line Reference Table A. 39 dnscmd /ageallrecords Parameters Switch Function ZoneName /NodeName /tree /f Specifies Specifies Specifies... path and name Import Related Parameters -k Specifies to ignore errors during the import operation and continue processing Continued www.syngress.com 5 69 271 _70- 292 _ AppxA.qxd 570 8/22/03 4:24 PM Page 570 Appendix A • MCSA Command-Line Reference Table A. 39 csvde/ldifde Parameters Switch Function Credentials Parameters -a UserDistinguishedName Specifies the command to run using UserDistinguishedName and... [/additional] [/node |/child |/startchild ChildName] [/continue |/detail] Table A.44 details the parameters associated with the dnscmd /enumrecords command www.syngress.com 5 79 271 _70- 292 _ AppxA.qxd 580 8/22/03 4:24 PM Page 580 Appendix A • MCSA Command-Line Reference Table A.44 dnscmd /enumrecords Parameters Switch Function ZoneName NodeName /type RRType RRData /authority /glue /additional /node /child /startchild... uses the following syntax: dnscmd [ServerName] /deletedirectorypartition FQDNofDP The FQDNofDP placeholder specifies the FQDN of the DNS application partition www.syngress.com 271 _70- 292 _ AppxA.qxd 8/22/03 4:24 PM Page 5 79 MCSA Command-Line Reference • Appendix A dnscmd /directorypartitioninfo The dnscmd /directorypartitioninfo command is used to display information about a DNS application directory... change notifications are sent only to a specified list of servers NotifyIPAddresses Specifies the list of IP addresses that are receive zone change notifications www.syngress.com 271 _70- 292 _ AppxA.qxd 8/22/03 4:24 PM Page 5 89 MCSA Command-Line Reference • Appendix A dnscmd /zoneresume The dnscmd /zoneresume command is used to start a paused zone and uses the following syntax: dnscmd ServerName /zoneresume... I dnscmd /directorypartitioninfo I dnscmd /enlistdirectorypartition I dnscmd /enumdirectorypartitions I dnscmd /enumrecords I dnscmd /enumzones I dnscmd /info www.syngress.com 271 _70- 292 _ AppxA.qxd 8/22/03 4:24 PM Page 571 MCSA Command-Line Reference • Appendix A I dnscmd /nodedelete I dnscmd /recordadd I dnscmd /recorddelete I dnscmd /resetforwarders I dnscmd /resetlistenaddresses I dnscmd /startscavenging... dsget quota The dsget quota command is used display the properties of a specified quota specification in Active Directory and uses the following syntax: www.syngress.com 565 271 _70- 292 _ AppxA.qxd 566 8/22/03 4:24 PM Page 566 Appendix A • MCSA Command-Line Reference dsget quota ObjectDN [-dn] [-acct] [-qlimit] [{-s Server | -d Domain}] [-u UserName] [-p {Password | *}] [-c] [-q] [-l] [{-uc | -uco | -uci}] Table... Specifies where the DNS server loads its configuration information from at startup The default setting is 3 /bindsecondaries [0|1] /bootmethod [0|1|2|3] Continued www.syngress.com 271 _70- 292 _ AppxA.qxd 8/22/03 4:24 PM Page 573 MCSA Command-Line Reference • Appendix A Table A.40 dnscmd /config Server Level Parameters Server Option Switch Function I 0 No source I 1 Loads from the BIND file that is located in . Password] www.syngress.com 271 _70- 292 _ AppxA.qxd 8/22/03 4:24 PM Page 568 MCSA Command-Line Reference • Appendix A 5 69 Table A. 39 details the parameters associated with the csvde and ldifde commands. Table A. 39 csvde/ldifde. continue processing. www.syngress.com Continued 271 _70- 292 _ AppxA.qxd 8/22/03 4:24 PM Page 5 69 570 Appendix A • MCSA Command-Line Reference Table A. 39 csvde/ldifde Parameters Switch Function Credentials. name of the group. www.syngress.com Continued 271 _70- 292 _ AppxA.qxd 8/22/03 4:24 PM Page 560 MCSA Command-Line Reference • Appendix A 561 Table A. 29 dsget group Parameters Switch Function -sid Displays