Documenti di Didattica
Documenti di Professioni
Documenti di Cultura
php
Useful commands
These commands could all be used in batch files, though some may need some "parsing" with FOR /F (http://www.robvanderwoude.com/ntfortokens.php) to retrieve only the required substrings from the displayed information.
otes: (1) Commands that use external, or third party, or non-native utilities contain hyperlinks to these utilities' download sites.
(2) Replace command arguments displayed in italics with your own values.
(3) Commands or utilities that require Windows Server 2003 are marked bright blue.
How many users are logged on/connected to a server (and who are they)?
Who is logged on to a computer?
What is this collegue's login name?
What is the full name for this login name?
What groups is this user a member of?
What permissions does a user have on this directory?
When did someone last change his password?
How do I reset someone's password?
Is someone's account locked?
How to unlock a locked account
List all domains and workgroups in the network
List all computers in the network
List all domain controllers
Find the primary domain controller
List all member servers
List all workstations
Delete a computer account
"I need an up-to-date list of disk space usage for all servers, on my desk in 5 minutes"
List all drivers on any PC
List all printers on any PC
List all local administrators
Locate rogue DHCP servers
Disable Windows Firewall for domain only
Completely disable Windows Firewall (not recommended)
Related links
By replacing FIND /C "\\" by FIND "\\" (removing the /C switch) you'll get a list of logged on users instead of just the number of users.
1 of 6 11/18/2010 2:22 PM
Useful commands for Windows administrators http://www.robvanderwoude.com/ntadmincommands.php
The first name in the list usually is the logged on user (try playing with the NET NAME command to learn more about the names displayed by NBTSTAT).
This is the fastest way to find the logged on user name, and the results that you do get are correct, but NBTSTAT won't always return a user name, even when a user is logged on.
ote: Unfortunately, NBTSTAT is no longer available in Windows 7 (not sure about Vista)
This is arguably the most reliable (native) command to find out who is logged on.
or:
PSEXEC (http://technet.microsoft.com/en-us/sysinternals/bb897553.aspx) \\remotecomputer NET CONFIG WORKSTATION | FIND /I " name "
or:
or:
or:
NETSH and WMIC are for XP or later, and are the most reliable of all commands shown here.
WMIC requires WMI enabled remote computers and Windows XP on the administrator's computer; NETSH requires Windows XP on the local and remote computers.
ote: Unfortunately, the NETSH command can no longer be used to display the logged on user in Windows 7 (not sure about Vista)
PSLOGGEDON is a more accurate solution than NBTSTAT, but it will return the last logged on user if no one is currently logged on.
The NET and NBTSTAT commands show more or less identical results, but the NBTSTAT command is much faster.
The REG command is accurate, but may need to be modified depending on the version used.
As displayed here, the code is written for REG.EXE 2.0 (Windows 2000) and later.
More information on REG versions can be found on my REG Query page.
For Windows NT 4 and 2000: use NBTSTAT (fast, but it won't always return the user name!), and only switch to REG if NBTSTAT doesn't return a user name (modify the REG command for Windows NT 4).
For Windows XP: if you want to search lots of computers for logged on users, I recommend you try NBTSTAT first (fast, but it won't always return the user name!), and only switch to NETSH, REG or WMIC (accurate)
if NBTSTAT doesn't return a user name.
For Windows Vista and later: use REG or WMIC (accurate).
Credits: Jiří Janyška (WMIC command) and Matthew W. Helton (NETSH command).
ote: Windows Server 2003's "DSTools (http://technet.microsoft.com/en-us/library/cc778084(WS.10).aspx)" will work fine in Windows 2000 and XP too, when copied.
Keep in mind, however, that some Windows Server 2003 Active Directory functionality is not available in Windows 2000 Active Directories.
ote: The NET command may seem more universal, because it requires neither Active Directory nor Windows Server 2003 commands, but it is language dependent!
For non-English Windows you may need to modify FIND's search string.
2 of 6 11/18/2010 2:22 PM
Useful commands for Windows administrators http://www.robvanderwoude.com/ntadmincommands.php
CD /D d:\directory2check
SHOWACLS (http://www.microsoft.com/Downloads/details.aspx?FamilyID=9d467a69-57ff-4ae7-96ee-b18c4790cffd&displaylang=en) /U:domain\userid
ote: To prevent the new password from being displayed on screen replace it with an asterisk (*); you will then be prompted (twice) to type the new password "blindly".
3 of 6 11/18/2010 2:22 PM
Useful commands for Windows administrators http://www.robvanderwoude.com/ntadmincommands.php
NET VIEW
NETDOM is part of the support tools found in the \SUPPORT directory of the Windows 2000 installation CDROM.
DSQUERY Server
or, if you prefer host names only (tip by Jim Christian Flatin):
or, to find the FSMO with (native) Windows Server 2003 commands (Active Directory only):
NETDOM is part of the support tools found in the \SUPPORT directory of the Windows 2000 installation CDROM.
NETDOM is part of the support tools found in the \SUPPORT directory of the Windows 2000 installation CDROM.
NETDOM is part of the support tools found in the \SUPPORT directory of the Windows 2000 installation CDROM.
NETDOM is part of the support tools found in the \SUPPORT directory of the Windows 2000 installation CDROM.
4 of 6 11/18/2010 2:22 PM
Useful commands for Windows administrators http://www.robvanderwoude.com/ntadmincommands.php
"I need an up-to-date list of disk space usage for all servers, on my desk in 5 minutes"
Sounds familiar?
The CSV file format is ServerName,DeviceID,FileSystem,FreeSpace,Size (one line for each harddisk partition on each server).
If you have a strict server naming convention, SERVERS.TXT itself can be generated with the NET command:
FOR /F "delims=\ " %%A IN ('NET VIEW ^| FINDSTR /R /B /C:"\\\\SRV\-"') DO (>>SERVERS.TXT ECHO.%%A)
otes: (1) assuming server names start with "SRV-"; modify to match your own naming convention.
FOR /F "delims=[]" %%A IN ('NET LOCALGROUP Administrators ˆ| FIND /N "----"') DO SET HeaderLines=%%A
FOR /F "tokens=*" %%A IN ('NET LOCALGROUP Administrators') DO SET FooterLine=%%A
NET LOCALGROUP Administrators | MORE /E +%HeaderLines% | FIND /V "%FooterLine%"
DHCPLOC.EXE (http://technet.microsoft.com/en-us/library/cc759117%28WS.10%29.aspx) is native in Windows Server 2003, and will run in Windows XP if copied/installed.
I didn't test this in Windows Server 2003 yet, but in Windows XP you need to press "d" to start the discovery, or "q" to quit.
5 of 6 11/18/2010 2:22 PM
Useful commands for Windows administrators http://www.robvanderwoude.com/ntadmincommands.php
Related links:
More information on Microsoft's "DSTools (http://technet.microsoft.com/en-us/library/cc778084(WS.10).aspx)" (DSADD, DSGET, DSMOD, DSMOVE, DSQUERY and DSRM) and other native Windows command line tools.
The PSTools (http://technet.microsoft.com/en-us/sysinternals/bb896649.aspx): and many other useful tools can be found at SysInternals (http://technet.microsoft.com/en-us/sysinternals/default.aspx).
Download several Windows 2000 Resource Kit Tools (http://support.microsoft.com/kb/927229) for free from Microsoft's web site.
6 of 6 11/18/2010 2:22 PM