Domain Name: Friends.

com
Computer Name: Test server.

How to identify the computer name in command prompt?

C:\>HOSTNAME
testserver

C:\>whoami
friends\administrator

How to identify the Fully Qualified Domain Name with command prompt?
C:\>whoami /FQDN
CN=Administrator,CN=Users,DC=friends,DC=com

Domain Name Service command

C:\>dnsmgmt.msc

Active Directory User & Computers

C:\>dsa.msc

Active Directory Domains and Trusts

C:\>domain.msc

Active Directory Sites and Services

C:\>dssite.msc

Dynamic Host Control Protocol

C:\>Dhcpmgmt.msc

Services (Local)
C:\>services.msc

Computer Management
C:\>compmgmt.msc

Device Management
C:\>devmgmt.msc

Control Panel
C:\>control

Add or Remove Programs

C:\>appwiz.cpl

Local user Creation

C:\>net user sk /add india123$ (sk- login name with pwd –india123$) (Local user creation)
Domain user creation with Password
C:\>dsadd user CN=abcd,CN=users,DC=Friends,DC=COM -pwd welcome123$
(CN-common name, DC=domain controller)

Domain Group creation

C:\>dsadd group CN=mark,CN=users,DC=friends,DC=com
dsadd succeeded:CN=mark,CN=users,DC=friends,DC=com

C:\>dsadd group CN=hr,CN=users,DC=friends,DC=com

dsadd succeeded:CN=hr,CN=users,DC=friends,DC=com

C:\>dsadd group CN=manage,CN=users,DC=friends,DC=com

dsadd succeeded:CN=manage,CN=users,DC=friends,DC=com

Domain Organization Creation

C:\>dsadd Ou OU=com,DC=friends,DC=com
dsadd succeeded:OU=com,DC=friends,DC=com

Domain user Delete

C:\>dsrm CN=three,CN=users,DC=friends,DC=com
Are you sure you wish to delete CN=three,CN=users,DC=friends,DC=com (Y/N)? y
dsrm succeeded:CN=three,CN=users,DC=friends,DC=com

C:\>dsrm CN=sale,CN=users,DC=friends,DC=com
Are you sure you wish to delete CN=sale,CN=users,DC=friends,DC=com (Y/N)? y
dsrm succeeded:CN=sale,CN=users,DC=friends,DC=com

C:\>dsrm CN=sec,CN=users,DC=friends,DC=com
Are you sure you wish to delete CN=sec,CN=users,DC=friends,DC=com (Y/N)? y
dsrm succeeded:CN=sec,CN=users,DC=friends,DC=com

Domain Group Delete

C:\>dsrm CN=sangeetha,CN=users,DC=friends,DC=com
Are you sure you wish to delete CN=sangeetha,CN=users,DC=friends,DC=com (Y/N)? y
dsrm succeeded:CN=sangeetha,CN=users,DC=friends,DC=com

How to add the user to group

C:\>dsmod group "CN=manage,CN=users,DC=friends,DC=com" -addmbr
"CN=kanags,CN=users,DC=friends,DC=com”
dsmod succeeded:CN=manage,CN=users,DC=friends,DC=com

C:\>dsmod group "CN=Domain Admins,CN=users,DC=friends,DC=com" -addmbr "CN=kanags

,CN=users,DC=friends,DC=com"
dsmod succeeded:CN=Domain Admins,CN=users,DC=friends,DC=com
C:\>dsmod group "CN=sangeetha,CN=users,DC=friends,DC=com" -addmbr "CN=kjl,CN=use
rs,DC=friends,DC=com"
dsmod succeeded:CN=sangeetha,CN=users,DC=friends,DC=com

List out the user in the group

C:\>dsget group "CN=manage,CN=users,DC=friends,DC=com" –members
"CN=seven,CN=Users,DC=friends,DC=com"
"CN=kanags,CN=Users,DC=friends,DC=com"

C:\>dsget group "CN=Domain Admins,CN=users,DC=friends,DC=com" –members

"CN=kanags,CN=Users,DC=friends,DC=com"
"CN=Administrator,CN=Users,DC=friends,DC=com"

User Creation with SAMID

C:\>dsadd user "CN=on,CN=users,DC=friends,DC=com" -samid on -pwd India123$ -desc "user account"
dsadd succeeded:CN=on,CN=users,DC=friends,DC=com (user creation with samid & Description)

How to add the one group to another group

C:\>dsget group "CN=manage,CN=users,DC=friends,DC=com" -members | dsmod group
"CN=hr,CN=users,DC=friends,DC=com" –addmbr
dsmod succeeded:CN=hr,CN=users,DC=friends,DC=com

C:\>dsget group "CN=hr,CN=users,DC=friends,DC=com" -members | dsmod group

"CN=mark,CN=users,DC=friends,DC=com" –addmbr
dsmod succeeded:CN=mark,CN=users,DC=friends,DC=com

How to reset the user password

C:\>dsmod user CN=sk,CN=users,DC=friends,DC=com -pwd pfizer123$ (reset password from command
prompt)
dsmod succeeded:CN=sk,CN=users,DC=friends,DC=com

How to add user, password with description

C:\>dsadd user CN=orange,CN=users,DC=friends,DC=com -pwd India123$ -desc "welcome"
dsadd succeeded:CN=orange,CN=users,DC=friends,DC=com

C:\>netsh interface Ip add address "local area connection" 192.168.100.30 255.255.255.0

Ok.

C:\>netsh interface ip set dns local static 10.0.0.55

Ok.

How to disable the user account

C:\>dsmod user CN=six,CN=users,DC=friends,DC=com -disabled yes (How do disable the user account)
dsmod succeeded:CN=six,CN=users,DC=friends,DC=com

How to Enable the user account

C:\>dsmod user CN=six,CN=users,DC=friends,DC=com -disabled no (How do Enable the user account)
dsmod succeeded:CN=six,CN=users,DC=friends,DC=com
How to create group with security Universal group
C:\>dsadd group CN=sasikala,CN=users,DC=friends,DC=com -secgrp no -scope u (U - universal group)
dsadd succeeded:CN=sasikala,CN=users,DC=friends,DC=com

How to create group with security Global group

C:\>dsadd group CN=sasi,CN=users,DC=friends,DC=com -secgrp no -scope g (G - Global group)
dsadd succeeded:CN=sasi,CN=users,DC=friends,DC=com

How to create group with security Damin Local group

C:\>dsadd group CN=kala,CN=users,DC=friends,DC=com -secgrp no -scope L (L – Domain local group)
dsadd succeeded:CN=kala,CN=users,DC=friends,DC=com

List of the users in the friends domain

C:\>dsquery user (List of users in the friends domain)
"CN=Administrator,CN=Users,DC=friends,DC=com"
"CN=Guest,CN=Users,DC=friends,DC=com"
"CN=SUPPORT_388945a0,CN=Users,DC=friends,DC=com"
"CN=krbtgt,CN=Users,DC=friends,DC=com"
"CN=a,CN=Users,DC=friends,DC=com"
"CN=b,CN=Users,DC=friends,DC=com"
"CN=msk,CN=Users,DC=friends,DC=com"
"CN=C,CN=Users,DC=friends,DC=com"
"CN=d,CN=Users,DC=friends,DC=com"
"CN=ms,CN=Users,DC=friends,DC=com"
"CN=ss,CN=Users,DC=friends,DC=com"
"CN=aaa,CN=Users,DC=friends,DC=com"
"CN=somu,CN=Users,DC=friends,DC=com"
"CN=asdf,CN=Users,DC=friends,DC=com"
"CN=asd,CN=Users,DC=friends,DC=com"
"CN=s,CN=Users,DC=friends,DC=com"
"CN=abcd,CN=Users,DC=friends,DC=com"
"CN=qwe,CN=Users,DC=friends,DC=com"
"CN=two,CN=Users,DC=friends,DC=com"
"CN=one,CN=Users,DC=friends,DC=com"
"CN=five,CN=Users,DC=friends,DC=com"
"CN=six,CN=Users,DC=friends,DC=com"
"CN=kanags,CN=Users,DC=friends,DC=com"
"CN=seven,CN=Users,DC=friends,DC=com"
"CN=eight,CN=Users,DC=friends,DC=com"
"CN=on,CN=Users,DC=friends,DC=com"
"CN=orange,CN=Users,DC=friends,DC=com"
"CN=ZZ,CN=Users,DC=friends,DC=com"

How to find the single user

C:\>dsquery user -name *a (Query for users)
"CN=a,CN=Users,DC=friends,DC=com"
"CN=aaa,CN=Users,DC=friends,DC=com"

List of group in the friends Domain

C:\>dsquery group (List of groups in the friends domain)
"CN=HelpServicesGroup,CN=Users,DC=friends,DC=com"
"CN=TelnetClients,CN=Users,DC=friends,DC=com"
"CN=Administrators,CN=Builtin,DC=friends,DC=com"
"CN=Users,CN=Builtin,DC=friends,DC=com"
"CN=Guests,CN=Builtin,DC=friends,DC=com"
"CN=Print Operators,CN=Builtin,DC=friends,DC=com"
"CN=Backup Operators,CN=Builtin,DC=friends,DC=com"
"CN=Replicator,CN=Builtin,DC=friends,DC=com"
"CN=Remote Desktop Users,CN=Builtin,DC=friends,DC=com"
"CN=Network Configuration Operators,CN=Builtin,DC=friends,DC=com"
"CN=Performance Monitor Users,CN=Builtin,DC=friends,DC=com"
"CN=Performance Log Users,CN=Builtin,DC=friends,DC=com"
"CN=Domain Computers,CN=Users,DC=friends,DC=com"
"CN=Domain Controllers,CN=Users,DC=friends,DC=com"
"CN=Schema Admins,CN=Users,DC=friends,DC=com"
"CN=Enterprise Admins,CN=Users,DC=friends,DC=com"
"CN=Cert Publishers,CN=Users,DC=friends,DC=com"
"CN=Domain Admins,CN=Users,DC=friends,DC=com"
"CN=Domain Users,CN=Users,DC=friends,DC=com"
"CN=Domain Guests,CN=Users,DC=friends,DC=com"
"CN=Group Policy Creator Owners,CN=Users,DC=friends,DC=com"
"CN=RAS and IAS Servers,CN=Users,DC=friends,DC=com"
"CN=Server Operators,CN=Builtin,DC=friends,DC=com"
"CN=Account Operators,CN=Builtin,DC=friends,DC=com"
"CN=Pre-Windows 2000 Compatible Access,CN=Builtin,DC=friends,DC=com"
"CN=Incoming Forest Trust Builders,CN=Builtin,DC=friends,DC=com"
"CN=Windows Authorization Access Group,CN=Builtin,DC=friends,DC=com"
"CN=Terminal Server License Servers,CN=Builtin,DC=friends,DC=com"
"CN=DnsAdmins,CN=Users,DC=friends,DC=com"
"CN=DnsUpdateProxy,CN=Users,DC=friends,DC=com"
"CN=DHCP Users,CN=Users,DC=friends,DC=com"
"CN=DHCP Administrators,CN=Users,DC=friends,DC=com"
"CN=Friends,CN=Builtin,DC=friends,DC=com"
"CN=mark,CN=Users,DC=friends,DC=com"
"CN=hr,CN=Users,DC=friends,DC=com"
"CN=manage,CN=Users,DC=friends,DC=com"
"CN=newgroup,CN=Users,DC=friends,DC=com"
"CN=leader,CN=Users,DC=friends,DC=com"
"CN=sasikala,CN=Users,DC=friends,DC=com"
"CN=sasi,CN=Users,DC=friends,DC=com"
"CN=kala,CN=Users,DC=friends,DC=com"
"CN=collection,CN=Users,DC=friends,DC=com"
"CN=area,CN=Users,DC=friends,DC=com"
"CN=kjl,CN=Users,DC=friends,DC=com"
"CN=ghn,CN=Users,DC=friends,DC=com"
"CN=rfgy,CN=Users,DC=friends,DC=com"
"CN=sangeetha,CN=Users,DC=friends,DC=com"

How to find the single group in the friends Domain

C:\>dsquery group -groupname s* (List of group in the friends domain starting with S)
dsquery failed:`-groupname' is an unknown parameter.
type dsquery /? for help.
C:\>dsquery group -name s*
"CN=Schema Admins,CN=Users,DC=friends,DC=com"
"CN=Server Operators,CN=Builtin,DC=friends,DC=com"
"CN=sasikala,CN=Users,DC=friends,DC=com"
"CN=sasi,CN=Users,DC=friends,DC=com"
"CN=sangeetha,CN=Users,DC=friends,DC=com"

Authoritative Mode Restore:-

(After backup i’ve deleted two users ex-s, six) how do restore the two users account?

C:\>ntdsutil
ntdsutil: authoritative restore
1. authoritative restore: restore object "CN=s,CN=users,DC=friends,DC=com"

Opening DIT database... Done.

The current time is 05-05-07 17:46.19.

Most recent database update occured at 05-05-07 17:25.38.
Increasing attribute version numbers by 100000.

Counting records that need updating...

Records found: 0000000001
Done.

Found 1 records to update.

Updating records...
Records remaining: 0000000000
Done.

Successfully updated 1 records.

Authoritative Restore completed successfully.

2. authoritative restore: restore object "CN=six,CN=users,DC=friends,DC=com"

Opening DIT database... Done.

The current time is 05-05-07 17:47.24.

Most recent database update occured at 05-05-07 17:46.19.
Increasing attribute version numbers by 100000.

Counting records that need updating...

Records found: 0000000001
Done.

Found 1 records to update.

Updating records...
Records remaining: 0000000000
Done.

Successfully updated 1 records.

Authoritative Restore completed successfully.

authoritative restore:

User account verification

ntdsutil: files
file maintenance: integravity
Error 80070057 parsing input - illegal syntax?
file maintenance: Integrity
Opening database [Current].
Executing Command: C:\WINDOWS\system32\esentutl.exe /g"C:\WINDOWS\NTDS\ntds.dit"
/o

Initiating INTEGRITY mode...

Database: C:\WINDOWS\NTDS\ntds.dit
Temp. Database: TEMPINTEG1840.EDB

Checking database integrity.

Scanning Status (% complete)

0 10 20 30 40 50 60 70 80 90 100
|----|----|----|----|----|----|----|----|----|----|
...................................................

Integrity check successful.

Operation completed successfully in 3.328 seconds.

Spawned Process Exit code 0x0(0)

If integrity was successful, it is recommended

you run semantic database analysis to ensure
semantic database consistency as well.

file maintenance: