Windows 2000 Tools

Graphical Tools

• Windows 2000 Help Troubleshooter
• Users and Passwords - This is a tool accessible from the Control Panel on Windows 2000 systems and is used for managing domain and local user accounts. Tabs include:
  • General - Used to add and remove users and set passwords.
  • Group Membership. Selections:
    • Standard user - A power user on the local computer that can install programs but not read other user's files.
    • Restricted user - A user that cannot install programs or change system settings.
    • Other - To make the user a member of any other group on the local computer such as Administrators.
• Active Directory Users and Computers - Active Directory Users and Computers is a Microsoft Management Console snap-in. It is started by selecting "Start", "Programs", "Administrative Tools", and "Active Directory Users and Computers". Only members of the Domain Admins or Enterprise Admins group can use this tool. This tool is used to create, configure, locate, move, and delete objects including:
  • User (automatically published) - Domain user accounts may be copied.
  • Group (automatically published)
  • Computer (Those in the domain are automatically published)
  • Contact (automatically published)
  • Domain
  • Organizational Unit (automatically published)
  • Shared folder
  • Printer (Most are automatically published) - Windows NT shared printers are not published automatically.
  Tabs from the OU Properties dialon box:
  • Group policy - Group policy object selections:
    • Windows Settings
      • Security Settings
        • Public key policies
          • Automatic certificate request menu items:
            • Action
              • New
                • Automatic Certificate Request
• System Policy Editor - To start the System Policy Editor, click "Start", "Run", and type "poledit" in the text box. System policy settings for all users on the domain set using the System Policy Editor are merged with local profiles. User logon restrictions are set in the user manager for domains. A policy may be set to automatically log users off during restricted logon hours.
• Distributed File System - Used to manage distributed file systems. Options:
  • Action
    • New DFS Root
    • Display an Existing DFS Root
• Windows Task Manager - Can be used to start and stop applications, change process priority, and monitor performance statistics. Can enter the task manager one of the following ways:
  • Press CTRL ALT DEL and select Task Manager
  • Press CTRL SHIFT ESC
  • Right click the taskbar and select Task Manager
  • Select "Start, "Run", and type "taskmgr".
  Tabs:
  • Applications
  • Processes - Shows PID, CPU, CPU time, and memory usage.
  • Performance - Shows:
    • CPU usage and history
    • Memory usage and history
    • Total handles, threads, and processes
    • Physical memory
    • Commit Charge - Memory allocated to the system or programs.
    • Kernel memory
• Setup Manager utility (SETUPMGR.EXE on the Windows NT install CD at \SUPPORT\TOOLS\deploy.cab) may be used to set up unattended installation answer file. On Windows 2000, this program is called the Setup Manager wizard and can be installed from the resource kit on the CDROM by running \Support\Reskit\Setup.exe.Options:
  • Create a new answer file.
  • Create an answer file that duplicates this computer's configuration.
  • Modify an existing answer file.
  • Sysprep Install - System preparation utility located on the CDROM in the \SUPPORT\TOOLS\Deploy.cab file. Works on non-domain controller windows 2000 computers. This utility allows a Windows 2000 hard drive to be copied to other computers.
  • Security Configuration and Analysis - An MMC snap-in which is used to analyze security on your system. To do a security analysis:
    • Create a security database store the results of the security analysis.
    • Open and change a security template .
    • Import a security template which is used to compare secure settings against. There are several security templates in the \Windir\Security\Templates directory. There are several of which some are for domain controllers and others for member servers.
    • Perform the analysis. Policies that do not match the template will have an "x" next to them.
  • Registry editor - Regedit32 or Regedit.
• Imaging - In the Accessories folder this tool is the only tool that can transfer images from digital cameras.