Take command of Windows 2000 Server with the Active Directory diagnostic tool

Ntdsutil.exe is an advanced command line tool that allows you to do a variety of tasks on your Windows 2000 Server, including diagnostics for Active Directory, database maintenance, and more. Learn about this powerful tool and what it can do for you.

Before Windows 2000, Microsoft was known for producing graphical user interface operating systems with poor command line support. But the situation has improved with the Windows 2000. In fact, some more advanced tasks can be accomplished only through command line tools.

One advanced command line tool is the Active Directory Diagnostic Tool, or Ntdsutil.exe. Administrators familiar with this tool know that Ntdsutil is not a toy. Improper use of the Ntdsutil can result in a partial or complete loss of Active Directory functionality.

Ntdsutil can be used, among other things, to:

• Perform authoritative restore of Active Directory
• Transfer or seize the Operations Master roles
• Check the integrity and low-level database corruption
• Repair the database
• Defragment AD online or offline
• Move the AD database

Some tasks, such as authoritative restore or moving the AD database, can only be done when Active Directory is not running. This is possible in special Directory Services Repair mode, one of the Windows 2000 Server startup options.

Ntdsutil differs from similar tools because you can use normal-length words instead of cryptic commands and switches. For example, to perform authoritative restore you can use the simple "Authoritative restore" instead of remembering the odd command of authre.