- Windows 2000 Professional
- Windows 2000 Server
- Windows 2000 Advanced Server
- Windows 2000 Datacenter Server
- Application Support
- System Operation
- Disks and Volumes
- Configuration Files
- Network Support
- Access Management
- AD Structure
- AD Objects
- AD Object Naming
- AD Schema
- AD Sites
- AD Functions
- AD Replication
- AD Security
- AD Installation
- AD Configuration
- AD Performance
- Installation Options
- Unattended Installation
- Software Distribution
- Remote Installation Service
- File Attributes
- Distributed File System
- Control Panel
- Active Directory Tools
- Computer Management Console Tools
- MMC Tools
- Network Tools
- Network Monitor
- System Performance Monitoring
- Managing Services
- Fault Tolerance
- System Failure
- Remote Access
- Certificate Server
- Terminal Services
- Web Services
- User Rights and Auditing
- User Profiles
- Group Policies
Windows 2000 Tools
- Windows 2000 Help Troubleshooter
- Users and Passwords - This is a tool accessible from the Control Panel on Windows 2000 systems and is used for managing domain and local user accounts. Tabs include:
- General - Used to add and remove users and set passwords.
- Group Membership. Selections:
- Standard user - A power user on the local computer that can install programs but not read other user's files.
- Restricted user - A user that cannot install programs or change system settings.
- Other - To make the user a member of any other group on the local computer such as Administrators.
- Active Directory Users and Computers - Active Directory Users and Computers is a Microsoft Management Console snap-in. It is started by selecting "Start", "Programs", "Administrative Tools", and "Active Directory Users and Computers". Only members of the Domain Admins or Enterprise Admins group can use this tool. This tool is used to create, configure, locate, move, and delete objects including:
Tabs from the OU Properties dialon box:
- User (automatically published) - Domain user accounts may be copied.
- Group (automatically published)
- Computer (Those in the domain are automatically published)
- Contact (automatically published)
- Organizational Unit (automatically published)
- Shared folder
- Printer (Most are automatically published) - Windows NT shared printers are not published automatically.
- Group policy - Group policy object selections:
- Windows Settings
- Security Settings
- Public key policies
- Automatic certificate request menu items:
- Automatic Certificate Request
- System Policy Editor - To start the System Policy Editor, click "Start", "Run", and type "poledit" in the text box. System policy settings for all users on the domain set using the System Policy Editor are merged with local profiles. User logon restrictions are set in the user manager for domains. A policy may be set to automatically log users off during restricted logon hours.
- Distributed File System - Used to manage distributed file systems. Options:
- New DFS Root
- Display an Existing DFS Root
- Windows Task Manager - Can be used to start and stop applications, change process priority, and monitor performance statistics. Can enter the task manager one of the following ways:
- Press CTRL ALT DEL and select Task Manager
- Press CTRL SHIFT ESC
- Right click the taskbar and select Task Manager
- Select "Start, "Run", and type "taskmgr".
- Processes - Shows PID, CPU, CPU time, and memory usage.
- Performance - Shows:
- CPU usage and history
- Memory usage and history
- Total handles, threads, and processes
- Physical memory
- Commit Charge - Memory allocated to the system or programs.
- Kernel memory
- Setup Manager utility (SETUPMGR.EXE on the Windows NT install CD at \SUPPORT\TOOLS\deploy.cab) may be used to set up unattended installation answer file. On Windows 2000, this program is called the Setup Manager wizard and can be installed from the resource kit on the CDROM by running \Support\Reskit\Setup.exe.Options:
- Create a new answer file.
- Create an answer file that duplicates this computer's configuration.
- Modify an existing answer file.
- Sysprep Install - System preparation utility located on the CDROM in the \SUPPORT\TOOLS\Deploy.cab file. Works on non-domain controller windows 2000 computers. This utility allows a Windows 2000 hard drive to be copied to other computers.
- Security Configuration and Analysis - An MMC snap-in which is used to analyze security on your system. To do a security analysis:
- Create a security database store the results of the security analysis.
- Open and change a security template .
- Import a security template which is used to compare secure settings against. There are several security templates in the \Windir\Security\Templates directory. There are several of which some are for domain controllers and others for member servers.
- Perform the analysis. Policies that do not match the template will have an "x" next to them.
- Registry editor - Regedit32 or Regedit.
- Imaging - In the Accessories folder this tool is the only tool that can transfer images from digital cameras.
Command Line Tools
- cipher - Used to encrypt files on NTFS volumes. Syntax:
cipher /[parameter] [filename]
- /d - Decrypt files or folders.
- /e - Encrypt files or folders.
- /f - Force encryption or decryption regardless of the file or folder current state.
- /I - Ignore errors.
- /q - Quiet mode, displaying only important information.
- /s:dir - Encrypt or decrypt subfolders and files also.
- dcpromo.exe - Used to demote a Windows 2000 Active Directory domain controller to a domain member server.
- ipsecmon.exe - The IPSec monitoring tool can be used to provide a summary of the local computer IPSec connections. This tool can be started by clicking on "Start", "Run" and entering "ipsecmon.exe" and pressing the ENTER key.
- Secedit - It is used to perform computer security configuration and analysis. For help type "secedit /?" on the command line.
- Sigverif - Used to find unsigned files on the computer.
- Sfc.exe - Used to replace any unsigned files with the original Microsoft version from the SystemRoot\System32\Dllcache directory.
- CONVERT.EXE - Resides on WINNT40\SYSTEM32\CONVERT.EXE. Will convert FAT partitions to NTFS partitions with the command "convert D: /FS:NTFS". The syntax is:
convert volume /FS:NTFS [/V]
The /V switch allows the program to run in verbose mode. Convert must have exclusive drive access to perform the conversion.
- NET - Used to perform network operations. Subcommands:
- Windows 2000 Support Tools
- MoveTree.exe - Used to move an object to another domain in Active Directory
- Troubleshooters - Series of questions.
- Add/Remove Hardware
- Device Manager - Displays device resource settings.
- System Information - To open this tool, right click on "My Computer", and select "Manage". Expand the "System Information" section to reveal:
- System Summary - Shows the operating system name and version being used and other hardware information.
- Hardware Resources. Options:
- Conflicts/Sharing - Shows any resource conflicts.
- DMA - Shows DMA addresses in use.
- Forced Hardware - Shows any manually configured devices.
- I/O - Shows ports.
- IRQs - Shows interrupts in use.
- Memory - Shows the memory in use and what devices are using the memory.
- Software Environment
- Internet Explorer 5