dfsrdiag backlog: why the count is not in the output
dfsrdiag is the operational and diagnostic command line tool that ships with DFS Replication, and its dfsrdiag backlog subcommand answers one question:…
Active Directory
Domain controllers, replication, Kerberos, DFS and Group Policy: the commands that show what Active Directory is really doing.
dfsutil and dfsdiag: managing and diagnosing DFS Namespaces
dfsutil and dfsdiag are the two command-line tools that come with the DFS Namespaces management feature. dfsutil reads and edits namespace configuration…
dfsrmig: check SYSVOL replication and migrate FRS to DFSR
dfsrmig is the SYSVOL migration tool. It ships with the DFS Replication service and it does exactly one job: it moves replication…
klist in Windows: read and clear the Kerberos ticket cache
Kerberos fails quietly. When a ticket cannot be issued, Windows falls back to NTLM or simply returns access denied, and nothing on…
w32tm in Windows: diagnose and fix domain time synchronisation
w32tm is the command line front end to the Windows Time service. It reports where a machine gets its time, how far…
repadmin in Windows: check, read and force Active Directory replication
repadmin is the tool that answers one question no GUI answers quickly: is every domain controller in this forest actually receiving the…
setspn in Windows: manage Service Principal Names and fix Kerberos SPN conflicts
setspn reads, adds, and deletes Service Principal Names (SPNs) on Active Directory accounts. An SPN is the identifier Kerberos uses to match…
dsquery and dsget in Windows: command-line Active Directory queries
You need to find every disabled user account in the Sales OU, and you are logged on to a Server Core box…
GPRESULT command in Windows
When a Group Policy setting is not applying as expected - a drive mapping is missing, a software restriction is not enforced,…
DCDiag: how to diagnose and fix Active Directory problems
When Active Directory starts behaving unexpectedly - users cannot log in, Group Policy stops applying, replication falls behind, or DNS resolution breaks…