Windows Server 2008 Portable Command Guide

Darril Gibson is the CEO of Security Consulting and Training, LLC. He regularly teaches, writes, and consults on a wide variety of security and technical topics. He has been a Microsoft Certified Trainer since 1999 and holds several certifications, including MCSE (NT 4.0, 2000, 2003), MCDBA (SQL Server), MCITP (Windows 7, Server 2008, and SQL Server), ITIL v3, Security+, and CISSP. He has authored, coauthored, or contributed to more than a dozen books. You can view a listing of most of his current books on Amazon at http://amzn.to/bL0Obo.

Introduction xvii

Part I: Command Prompt Basics

Chapter 1 Launching and Using the Command Prompt 1

Launching the Command Prompt 1

Launching with Elevated Privileges 2

Using the Built-in doskey Program 3

Creating Mini Macros with doskey 5

Cutting and Pasting to and from the Command Prompt 5

    Copying from the Command Prompt Window 6

    Pasting Data to the Command Prompt Window 6

Changing the Options and Display 7

Chapter 2 Basic Rules When Using the Command Prompt 9

Using Uppercase or Lowercase 9

Using Quotes 10

Understanding Variables 11

Understanding Switches 13

Understanding Wildcards 13

Getting Help 14

Understanding Paths 17

Using Basic Commands 18

Redirecting Output to Files 19

Chapter 3 Manipulating Files, Folders, and Shares 21

Copying Files with copy, xcopy, and robocopy 21

    copy 21

    xcopy 22

    robocopy 23

Compressing Files with compact 26

Encrypting Files with cipher 27

Manipulating Shadow Copies with vssadmin 28

Manipulating Shares with net share 31

Mapping Drives with net use 32

Manipulating Users and Groups with the net Command 33

Modifying NTFS Permissions with icacls 34

Chapter 4 Creating Batch Files 37

Using Notepad 37

Giving Feedback with echo 38

Using Parameters 39

Calling Another Batch File with call 41

Clearing the Screen with cls 42

Changing the Order of Processing with goto 42

Checking Conditions with if 43

Part II: Managing and Troubleshooting DNS

Chapter 5 Using dnscmd 47

Retrieving DNS Information 47

Exporting DNS Data 49

Forcing Zone Transfers 49

Clearing the DNS Cache 49

Working with DNS Partitions 50

Adding DNS Zones 51

Creating and Deleting DNS Records 53

Chapter 6 Using nslookup 55

Verifying Records with nslookup 55

Configuring DNS for nslookup 58

Using nslookup Without PTR Records 59

Using nslookup Without a Reverse Lookup Zone 60

Part III: Managing and Troubleshooting Active Directory

Chapter 7 Using Basic ds Commands 63

Understanding Distinguished Names 63

Adding Objects with dsadd 65

Modifying Accounts with dsmod 67

Moving Accounts with dsmove 69

Removing Objects with dsrm 70

Chapter 8 Using Advanced ds Commands 71

Retrieving Information about Objects with dsquery 71

Retrieving Information About Objects with dsget 73

Viewing and Modifying AD Permissions with dsacls 75

Chapter 9 Promoting and Demoting a Domain Controller (DC) 77

Promoting a DC with dcpromo 77

Demoting a DC with dcpromo 79

Using dcpromo with an unattend File 80

Promoting a DC to an RODC with an Existing Account 81

Using dcpromo to Install from Media 83

Forcing Removal of Active Directory 84

Chapter 10 Working with the Schema 87

Modifying the Schema with adprep 87

Registering the Active Directory Schema Snap-In 88

Chapter 11 Working with Active Directory Accounts 91

Using ldifde to Export, Import, and Delete Accounts 91

Using csvde to Export and Import Accounts 95

Redirecting Computer Accounts 97

Redirecting User Accounts 98

Chapter 12 Using ntdsutil 101

Resetting the Directory Services Restore Mode Password 101

Changing the Garbage Collection Logging Level 102

Moving Active Directory to a Different Drive 103

Defragmenting Active Directory 104

Performing an Authoritative Restore 105

Removing a Domain Controller from Active Directory 107

Seizing an Operations Master Role 108

Chapter 13 Using netdom 111

Identifying Operations Master Roles 111

Joining a Computer to a Domain 111

Verifying Trust Relationships 113

Querying and Resetting Secure Channels with netdom 116

Chapter 14 Troubleshooting Replication 119

Checking Replication with repadmin 119

Forcing Replication with repadmin 121

Migrating to DFSR with dfsrmig 123

Part IV: Group Policy and the Command Line

Chapter 15 Group Policy Overview 127

Launching the Group Policy Management Console 127

Understanding Group Policy Order of Precedence 128

Filtering GPOs by Modifying Permissions 130

Understanding Group Policy Settings 132

    Enabling Auditing Through Group Policy 132

    Enabling Advanced Auditing for Directory Services Changes 134

    Deploying Applications 135

    Configuring Automatic Updates 137

Blocking Inheritance 138

Enforcing GPOs 138

Using Loopback Processing 139

Running Scripts with Group Policy 140

Chapter 16 Group Policy Command-Line Tools 143

Viewing Group Policy Settings with gpresult 143

Refreshing Group Policy Settings with gpupdate 146

Chapter 17 Security Configuration Wizard 149

Understanding the Security Configuration Wizard 149

Using scwcmd 151

Part V: Configuring Server Core

Chapter 18 Configuring Server Core after Installation 155

Installing Server Core 155

Restoring the Command Prompt 156

Renaming the Computer 157

Logging Off, Shutting Down, and Rebooting 158

Configuring TCP/IP 159

Setting the Time, Date, and Time Zone 160

Joining a Domain 161

Chapter 19 Adding Roles to Server Core 163

Understanding the Supported Roles 163

Using ocsetup to Add Roles to Windows Server 2008 164

    Adding the DHCP Server Role with ocsetup 165

    Adding the DNS Server Role with ocsetup 166

    Adding File Services with ocsetup 166

    Adding the Print Services Role with ocsetup 166

    Adding the Web Server (IIS) Role with pkgmgr 166

Using dism to Add Roles to Windows Server 2008 R2 167

    Adding the DHCP Server Role with dism 168

    Adding the DNS Server Role with dism 168

    Adding File Services with dism 169

    Adding the Print and Document Services Role with dism 169

    Adding the AD CS Role with dism 169

    Adding the AD LDS Role with dism 169

    Adding PowerShell with dism 170

Adding the AD DS Role 170

Chapter 20 Configuring Server Core for Remote Administration 171

Using the Server Core Registry Editor 171

Enabling Access with Remote Microsoft Management Consoles (MMCs) 173

Configuring the Firewall to Reply to Ping 175

Part VI: Managing and Maintaining Windows Server 2008 and Windows Server 2008 R2

Chapter 21 Manipulating Services 177

Stopping and Starting Services with the net Command 177

Manipulating Services with sc 178

Manipulating Services with wmic 181

    Configuring the Firewall to Allow wmic 181

    Using the wmic service list Command 182

    Using the wmic service call Command 183

Chapter 22 Basic Routing on a Server 187

Viewing the Routing Table with route print 187

Adding Routes to the Routing Table with route add 189

Modifying Routes in the Routing Table with route change 191

Deleting Routes from the Routing Table with route delete 192

Chapter 23 Working with Printers 193

Publishing Printers to Active Directory with pubprn.vbs 193

Migrating Printers with printbrm 196

Controlling the Print Queue with prnqctl.vbs 197

Chapter 24 Licensing and Activation 201

Managing Activation Tasks with slmgr 201

    Managing Basic Tasks with slmgr 201

    Viewing License Information with slmgr 202

    Managing KMS Servers with slmgr 203

    Using KMS Activation Keys 204

    Managing KMS Clients with slmgr 204

Forcing Registration of KMS Server SRV Records 205

Manually Creating an SRV Record for KMS 206

Chapter 25 Using netsh 209

Understanding netsh 209

Understanding netsh Contexts 210

Configuring IPv4 with netsh 214

Configuring an IPv6 Address with netsh 217

Disabling IPv6 in Windows Server 2008 218

Chapter 26 Working with Event Subscriptions 219

Enabling the Source Computer with winrm 219

Enabling the Collector Computer with wecutil 220

Adding an Account to the Event Log Readers Group 221

Enabling and Testing Event Subscriptions 223

Managing Subscriptions with wecutil 226

Logging Events with eventcreate 228

Chapter 27 Using wbadmin 231

Adding wbadmin to a Server 231

Backing Up System State Data with wbadmin 232

Restoring System State Data with wbadmin 233

Restoring System State Data on a Domain Controller with wbadmin 235

Backing Up Volumes with wbadmin 236

Restoring Volumes with wbadmin 238

Part VII: Troubleshooting Windows Server 2008 and Windows Server 2008 R2

Chapter 28 Troubleshooting Networking Issues 241

Viewing and Manipulating TCP/IP Configuration with ipconfig 241

Checking Connectivity with ping 247

Viewing the Router Path with tracert 251

Checking for Data Loss with pathping 251

Chapter 29 Using the Reliability and Performance Monitor 253

Gathering Information from the Reliability Monitor 253

Running System Data Collector Sets 256

Writing a Script to Run Data Collector Sets 258

Scheduling a Script to Run Data Collector Sets 259

Chapter 30 Using Network Monitor and nmcap 261

Installing Network Monitor 261

Starting and Using Network Monitor 262

Using nmcap to Capture Traffic 264

Automatically Starting, Stopping, and Terminating nmcap 265

Adding Filters to nmcap 267

Enabling Promiscuous Mode in nmcap 268

Part VIII: Terminal Services and Remote Desktop Services

Chapter 31 Remote Desktop Services 269

Adding the Remote Desktop Services Role 269

Viewing and Manipulating the Install Mode with change user 272

Modifying Logon Capabilities with change logon 272

Connecting and Disconnecting Sessions with tscon and tsdiscon 273

Identifying Open Sessions with query user or quser 274

Resetting Sessions with reset session 275

Chapter 32 Remote Administration 277

Configuring, Verifying, and Removing winrm 277

Using winrs to Issue Commands 278

Connecting to Remote Systems with mstsc 280

Part IX: Working with Some Server Roles from the Command Line

Chapter 33 Using Windows Deployment Services 283

Adding the WDS Role 283

Configuring the WDS Role 285

Adding Boot Images to WDS with wdsutil 285

Creating Image Groups Using wdsutil 286

Adding Install Images Using wdsutil 286

Configuring Server Properties Using wdsutil 288

Running the sysprep GUI 290

Running sysprep from the Command Line 291

Chapter 34 Manipulating IIS with appcmd 293

Managing Sites with appcmd 293

Adding a Site with appcmd 294

Adding an Application to a Site with add app 295

Adding a Virtual Directory with add vdir 295

Starting and Stopping Application Pools with appcmd and appcmd stop 296

Part X: Using Visual Basic Scripts (VB Script)

Chapter 35 Creating Basic Visual Basic Scripts 297

Working with filesystemobject 297

Accessing a Network Share with filesystemobject 300

Calling Scripts from a Batch File 300

Displaying a Message Box with a Visual Basic Script 300

Using if Statements 302

Checking for a Value with a Message Box 302

Chapter 36 Manipulating Active Directory with Visual Basic Scripts 305

Connecting to Active Directory with a VB Script 305

Creating an OU with a VB Script 305

Creating a User Account with a VB Script 306

Modifying the Tombstone Lifetime 307

Part XI: Using PowerShell

Chapter 37 Starting and Using PowerShell 311

Installing and Launching PowerShell 311

Understanding PowerShell Verbs and Nouns 312

Tabbing Through PowerShell Commands 316

Understanding the Different Types of PowerShell Commands 318

Creating Aliases 318

Discovering Windows PowerShell Commands 318

Exploring get-member 320

Redirecting Output with Windows PowerShell 322

Understanding PowerShell Errors 323

Understanding PowerShell Variables 324

Using Comparison Operators 327

Understanding Pipelining 327

Chapter 38 Creating and Running a PowerShell Script 331

Setting the Security Context 331

Creating a PowerShell Profile 332

Creating and Modifying the Global PowerShell Profile 334

Running PowerShell Scripts 336

Logging Processes with a get-process Script 337

Testing for the Existence of a File 338

Creating Output as HTML 340

Running a Script Against Multiple Computers 341

Scheduling PowerShell Scripts 344

Chapter 39 Using the Integrated Scripting Environment 347

Launching the ISE 347

Exploring the ISE 348

Executing Commands in the ISE 350

Creating and Saving a Script in the ISE 351

Chapter 40 Using PowerShell to Manage Active Directory 357

Using the Active Directory Module in Windows Server 2008 R2 357

Creating and Manipulating Objects in Windows Server 2008 359

Creating an OU with PowerShell 359

Creating a User with PowerShell 359

Moving Objects with PowerShell 360

Working with the Domain Object 361

Working with the system.directoryservices Namespace 362

Creating a List of Domain Computers 363

Appendix Create Your Own Journal Here 365

 

 

9780789747372    TOC    4/21/2011