Previous Page | Next Page

  1. Introduction
  2. Capabilities
  3. Structure
  4. The Registry
  5. System and Configuration Files
  6. Security
  7. Application Support
  8. Requirements
  9. Installation
  10. Unattended Installation
  11. Booting
  12. Filesystems
  13. Programs
  14. Control Panel
  15. Tool
  16. Commands
  17. Customization
  18. Environment Variables
  19. Printing
  20. Performance
  21. System Services
  22. Permissions
  23. Groups
  24. User Rights and Auditing
  25. User Profiles
  26. Policies
  27. Network Model
  28. Resource Access
  29. Network Browsing
  30. Protocol Support
  31. RAS
  32. Networking
  33. Backups
  34. Events
  35. Error Handling
  36. Diagnostic Tools
  37. Items to Memorize
  38. Terms
  39. Credits

Windows NT Workstation Commands

  • AT - The Scheduler Service must be active to use the AT command for batch file scheduling. The Control Panel, Services applet is used to enable the Scheduler Service. AT command syntax:

    AT [\\remotecomputer] id /delete [/yes]
    AT [\\remotecomputer] time [interactive] [/next date] [/every date] batchfilename

    Terms are:

    1. Remotecomputer - The name of a remote computer the command will be run on. If no name is specified, the local computer is used.
    2. Time - Time in a 24 hour period in "hours:minutes". For example, a setting of 10:15 will cause the operation to take place at 10:15 A.M.
    3. Options:
      • /delete - A scheduled command is cancelled by specifying its ID number.
      • /interactive - The batch job can interact with the user that is logged on when it runs.
      • /every: date - Specifies a day or days of the week the command will be run on. Days are "M, T, W, Th, F, S, Su)" or a numeric month day. Multiple parameters may be specified separated by commas.
      • /next: date - Schedules the command to run once on the next day indicated.
    4. Batchfilename - The name of the batch file to be executed.

    To schedule a backup batch file to run every Monday and the first day of the month a command like the following may be used:

    AT 1:00 /every:M,1 BACKUP.BAT

    This command will run at 1 A.M.

  • NTBACKUP - It may be used to backup data to tapes, but it provides no software compression and has no scheduler. Files that are being used by users are not backed up. If the "Copy" option is used, the archive bit for backed up files is not set. It is started from "Administrative Tools". Syntax:

    NTBACKUP [/nopoll] [/missingtape]
    NTBACKUP path\filenames options
    NTBACKUP operation path [/a] [/v] [/r] [/d description] [/b] [/hc:on:off] [/t option] [/l filename] [/e] [/tape:n]

    • Path\filenames - The location and name of files to be backed up
    • Options are:
      • /A - Append the backup set to the current tape.
      • /b - Back up the system Registry.
      • /d "text" - Backup set description text.
      • /e - Create a summary log file instead of a detailed log file.
      • /l filename - Set the log file name to the name specified rather than the default name.
      • /r - Restrict access to the tape to Administrators, Backup Operators, Server Operators, or users who perform the backup.
      • /t type - The type of backup to perform. Options are Normal, Copy, Incremental, Differential, Daily. The default is Normal.
      • /v - Verify that the files were backed up correctly.
      • /hc: on/off - Turn hardware compression on or off.

    To backup data on a network share in a batch file the following sequence of commands may be used:

    CMD /C NET USE M: \\servername\sharename
    NTBACKUP M: /a /t Copy /v
    CMD /C NET USE M: /D

    The /D at the end of the batch file, disconnects the share.

  • CMD - Used to specify a command to be run as a command line command.

  • NET - Used to connect to remote shares. The following shows how remote shares can be connected to using the command line:

    CMD /C net use drive: \\server\share

    Drive is the drive that the share will be mapped to such as "h:". The \\server\share is the UNC path of the remote share. Options:

    • Accounts
    • Computer
    • Config
    • Continue
    • File
    • Group
    • Help
    • Helpmsg
    • Localgroup
    • Name
    • Pause
    • Print
    • Send - Used to send a message to specific users or all users.
    • Session
    • Share
    • Start
    • Statistics
    • Stop
    • Time
    • Use - Used to connect to remote shares.
    • User - Used to create NT users from a batch file.
    • View - Used to view available resources on a computer. Use the UNC name with the following syntax: "net view \\machinename".


  • CACLS.EXE - Provides for editing of the access control list (ACL) of files and directories from the command line. User rights are specified by N-none, C-change, R-read, F-full. Options are:
    • /T - Change the access control lists of the files specified in this directory and all subdirectories.
    • /E - Don't replace the access control list, but modify it.
    • /C - Change access control lists while ignoring errors.
    • /G - Grant user rights
    • /R - Used with the /E option is used to revoke user rights
    • /P - Replace the specified user rights with those specified by one of N, C, R, or F.
    • /D - Deny access to the specified user

    Example: CACLS foldername /p mark:c

  • COMPACT.EXE - Used as a command line to to manage folder and file compression on NTFS filesystems. The syntax is

    COMPACT /C d:\path\fname

    where fname is a file or folder name. The Options are:
    • /A - Hidden and system files are displayed
    • /C - Makes the file or folder compressed.
    • /F - Forces compression on all files even if they were already marked as compressed.
    • /I - Forces continuation even if errors are encountered.
    • /Q - Displays a summary of information about the operation.
    • /S - Applies the command to files and sub folders contained in the folder specified.
    • /U - Makes the file or folder uncompressed.
    • /? - Help


  • dcomcnfg - The tool used to configure DCOM

  • LPQ - Lists print queue information from a Unix host. syntax

    LPQ -S HostIPaddress -P PrinterName -l

    The man page on a Unix or Linux host gives more information.

  • CONVERT.EXE - Resides on WINNT40\SYSTEM32\CONVERT.EXE. Will convert FAT partitions to NTFS partitions with the command "convert D: /FS:NTFS".

  • LPR - Directs a print job to a Unix host device:

    LPR -S HostIPaddress -P PrinterName FileName

    The man page on a Unix or Linux host gives more information.

  • NTHQ - NT hardware detection tool on the installation CD-ROM in the directory \SUPPORT\HQTOOL. It runs in DOS, so you must but a DOS disk that supports your CD-ROM driver to run it. To enter the program on the NT Workstation CD-ROM, enter the directory "\SUPPORT\HQTOOL" and type the command "makedisk". This will make a floppy which you must boot from to do the test.

  • RDISK.EXE - Used to create an emergency repair disk. Can store the registry. It can save:
    • Accounts database (SAM) including passwords, security settings and group information.
    • Computer name, workgroup, and domain.
    • The configuration of device drivers.
    • Hard drive configuration information.
    • Hardware profile.
    • Network settings.
    • Hive information: default, security, and software hives.
    • Config.NT and Autoexec.NT

    Information is stored in \WINNT_ROOT\Repair then copied to disk. The ERD does not back up data and is not a replacement for data loss.


  • DISKPERF -Y - Used to make disk counters active. The command "diskperf -ye" is used to activate disk counters on stripe sets. After issuing the command, the system must be rebooted to make the change effective.

  • DIR /X - Will display 8.3 format DOS file name as stored by NT.

  • NTDETECT.COM - Detects Hardware

  • NTOSKERNEL.EXE - The kernel.

  • EXPAND - Typing "EXPAND -R filename" will install a compressed file on NT

Performing Functions in NT

  • Determine disk Cluster Size - Select Administrative Tools, WinNt Diagnostic Utility, select Drives Tab, select the partition, and select property. Cluster size is bytes per sector times the number of sectors per cluster.