Maintaining AD DS - PowerShell Flashcards
Implementing Virtualized Domain Controllers Implementing Read Only Domain Controllers Administering AD DS Managing the AD DS Database (157 cards)
Ntdsutil
a command-line tool that provides management facilities for Active Directory Domain Services (AD DS)
How would you create a snapshot and mount it?
Snapshot:
- Ntdsutil
- Snapshot
- activate instance ntds
- Create
- quit x2
Mount Snapshot:
- Ntdsutil
- Snapshot
- activate instance ntds
- list all
- GUID from Snapshot
- quit x2
Connecting to Snapshot:
dsamain /dbpath C:$SNAP_(DateTime)_volumeC$\windows\ntds\ntds.dit /ldapport 5000
How do you unmount a snapshot?
UnMount:
- ntdsutil
- snapshot
- activate instance ntds
- list all
- unmount guid
- list all
- quit
- Quit
How do you reset the DSRM Admin Password?
To Reset the DSRM Administrator Password
- Click, Start, click Run, type ntdsutil, and then click OK.
- At the Ntdsutil command prompt, type set dsrm
- password.
- At the DSRM command prompt, type one of the following
- lines:
- To reset the password on the server on which you are working, type reset password on server null. The null variable assumes that the DSRM password is being reset on the local computer. Type the new password when you are prompted. Note that no characters appear while you type the password.
- To reset the password for another server, type reset password on server servername, where servername is the DNS name for the server on which you are resetting the DSRM password. Type the new password when you are prompted. Note that no characters appear while you type the password.
- At the DSRM command prompt, type q.
- At the Ntdsutil command prompt, type q to exit.
How do you create install media for a DC?
ntdsutil
activate instance ntds
ifm
create sysvol full <drive>:\<installationmediafolder></installationmediafolder></drive>
What does the following PowerShell CmdLet Do?
Add-ADCentralAccessPolicyMember
Adds central access rules to a central access policy in Active Directory.
What does the following PowerShell CmdLet Do?
Add-ADComputerServiceAccount
Adds one or more service accounts to an Active Directory computer.
What does the following PowerShell CmdLet Do?
Add-ADDomainControllerPasswordReplicationPolicy
Adds users, computers, and groups to the allowed or denied list of a read-only domain controller password replication policy.
What does the following PowerShell CmdLet Do?
Add-ADFineGrainedPasswordPolicySubject
Applies a fine-grained password policy to one more users and groups.
What does the following PowerShell CmdLet Do?
Add-ADGroupMember
Adds one or more members to an Active Directory group.
What does the following PowerShell CmdLet Do?
Add-ADPrincipalGroupMembership
Adds a member to one or more Active Directory groups.
What does the following PowerShell CmdLet Do?
Add-ADResourcePropertyListMember
Adds one or more resource properties to a resource property list in Active Directory.
What does the following PowerShell CmdLet Do?
Clear-ADAccountExpiration
Clears the expiration date for an Active Directory account.
What does the following PowerShell CmdLet Do?
Clear-ADClaimTransformLink
Removes a claims transformation from being applied to one or more cross-forest trust relationships in Active Directory.
What does the following PowerShell CmdLet Do?
Disable-ADAccount
Disables an Active Directory account.
What does the following PowerShell CmdLet Do?
Disable-ADOptionalFeature
Disables an Active Directory optional feature.
What does the following PowerShell CmdLet Do?
Enable-ADAccount
Enables an Active Directory account.
What does the following PowerShell CmdLet Do?
Enable-ADOptionalFeature
Enables an Active Directory optional feature.
What does the following PowerShell CmdLet Do?
Get-ADAccountAuthorizationGroup
Gets the accounts token group information.
What does the following PowerShell CmdLet Do?
Get-ADAccountResultantPasswordReplicationPolicy
Gets the resultant password replication policy for an Active Directory account.
What does the following PowerShell CmdLet Do?
Get-ADAuthenticationPolicy
Gets one or more Active Directory Domain Services authentication policies.
What does the following PowerShell CmdLet Do?
Get-ADAuthenticationPolicySilo
Gets one or more Active Directory Domain Services authentication policy silos.
What does the following PowerShell CmdLet Do?
Get-ADCentralAccessPolicy
Retrieves central access policies from Active Directory.
What does the following PowerShell CmdLet Do?
Get-ADCentralAccessRule
Retrieves central access rules from Active Directory.