38400bindex.fm Page 643 Monday, December 17, 2007 10:22 PM
Index
Note to the reader: Throughout this index boldfaced page numbers indicate primary discussions of a topic. Ital- icized page numbers indicate illustrations.
Symbols and Numbers obtaining user's logon name, 486 pipe for data transfer between utilities, 480 * (asterisk) test server for, 488 DSQuery utility for all objects, 484 Active Directory Application Mode, 4 in regular expressions, 407 Active Directory Lightweight Directory Services (AD in script for password, 488 LDS), 4 as wildcard character, 359 Active Directory Services Interface Editor (ADSIEdit), ^ (circumflex), in regular expressions, 407 468 $ (dollar sign), in regular expressions, 407 active route, 309 $username$ token, 471 Active Server Pages (ASP), 5, 551 > (greater than) sign, for output redirection, 380 installing support in IIS, 556, 556 < (less than) sign, for input redirection, 381 active session, disconnecting, with TSDiscon utility, . (period), in regular expressions, 407 436–437 ? (question mark) ActiveXObject() method, 185 in AppCmd utility, 561 activity indicator, 344 as wildcard character, 359 ADAP utility, 65 /? (command line switch), 587 ADD command (AppCmd), 571, 572 for help, 23–25, 616 add command (NetSH), 170 script code to handle, 185–186 ADD command (Route utility), 310 / (slash), for command line switch, 23–24 add disk command (DiskPart), 229 [ ] (square brackets) Add to Favorites dialog box (RegEdit), 71 for optional command input, 23 AddPrinterConnection() method, of WshNetwork object, in regular expressions, 407 180 4DOS, 542 Address Resolution Protocol (ARP), 292 8.3 naming convention (DOS), 373 Administration.CONFIG file, 579, 579–580 for copying files, 357 administrative installation, 343 creating destination file with, 386 Administrator account, 6 for Active Directory utilities, 465 A default password setting, 349 for Process Explorer, 533 ABOVENORMAL priority, for starting application, 126 administrators, batch file use, 149 absolute path, 259 Administrators group acceleration, of mouse, 87 access to root directory, 411 accessibility settings, 89–91 becoming part of, 7 ACCOUNTS mode, of Net utility, 275 AdminScriptEditor, 198 activation process, 8, 9 ADSIEdit (Active Directory Services Interface Editor), managing with SLMGR, 66–67 468 active command (DiskPart), 229 Advanced Attributes dialog box, 394 Active Directory, 4, 465 advertising application on network, 343 creating new objects, 467–473 adware, 536 computer objects, 469 locating, 300 contact object, 469–470COPYRIGHTEDaffinity, MATERIAL of process, 14 group object, 470 AJAX (Asynchronous JavaScript and XML), 5 ou (organizational unit), 470 al (archive-log) command (WEvtUtil), 453–454 quota object, 473 alerts, managing, 456–459 user object, 471–472 alias file, for netsh utility, 168 database management, 485–486 aliases, WMIC, 47–55 deleting objects, 484 ALLOCATE mode, of RSM utility, 263–264 editing objects, with DSMod utility, 477 allowextchar (FSUtil Behavior mode), 239 listing objects, 473–477 alternative mapping register sets, 107 managing, with DSQuery utility, 478–484 Alt+Tab combination, for local vs. remote system, 34 moving objects, with DSMove utility, 477 American National Standards Institute (ANSI), 192
38400bindex.fm Page 644 Monday, December 17, 2007 10:22 PM
644 ANSI TERMINAL TYPE • BACKUP OBJECTS
ANSI terminal type, for Telnet, 443 asterisk (*) ANSI.SYS device driver, 106 DSQuery utility for all objects, 484 APP objects, for AppCmd utility, 567 in regular expressions, 407 AppCmd utility, 557, 559–561, 560, 561, 565 in script for password, 488 for managing IIS, 566–573 as wildcard character, 359 command line switches, 569–571 Asynchronous JavaScript and XML (AJAX), 5 commands, 571–573 AT command line utility, 211–212, 584 APPEND environment variable, 226 combining with batch files, 215–217 Append utility, 225–226 effective use, 217 appending data, with double output redirection pointer for temporary tasks, 217 (>>), 380–381 ATMAdm, 273 application databases, SDBInst utility for managing, 352 Attach mode, for FltMC utility, 237 Application log, 446 attributes, 395–396 Application property, of WScript object, 177 of copied files, 372 application-to-application communication, RPC for, 311 and Dir command, 402–403 ApplicationHost.CONFIG file, 558–559, 559, 577–579, 578 of files and directories, changing, 394 applications attributes command (DiskPart), 229 advantages, 197 AuditPol utility, 491–495 advertising on network, 343 Backup mode, 494 custom AutoExec.NT and Config.NT files for, 113 Clear mode, 494 deficiencies, 194 Get mode, 492 defining compatibility, 113–114 List mode, 493–494 displaying status of those in memory, 323 Remove mode, 494–495 executing with Start command, 124–126 Restore mode, 494 installing, 6, 38–39 Set mode, 492–493 with MSIExec utility, 343–346 authentication level, for RPCPing, 313 malicious, removing, 505 Authoritative restore command (NTDSUtil), 485 modifying setup, 89–96 AuthType, for iSCSICli utility, 257 accessibility settings, 89–91 AutoChk utility, 240 common desktop settings, 91–93 and ChkNTFS, 398 international settings, 93–96 AutoConv utility, 227 OCList utility for verifying status, 350–351, 351 AutoExec.NT file, 99, 100 OCSetup utility for adding and removing, 347–350 adding environment variables to, 121 repair levels for, 345–346 custom for application, 113 resetting within Terminal Services, 435 modifying, 109–113 risk from Internet downloads, 536 tricks and techniques, 586, 588 Send To menu entry for, 523 AutoFmt utility, 227 setting and viewing paths, 261–262 AutoLfn utility, 227 Task Manager for display of running, 11–12, 12 automatic logon, with Telnet, 443 TaskList command for listing, 512, 512–514 automatic updates, 41 terminating tasks, 509–512 with SCRegEdit script, 74 third-party, graphical interface requirements, 319 Automatic Updates applet, 6, 74 updates with MSIExec utility, 345 automount command (DiskPart), 229–230 APPPOOL objects, for AppCmd utility, 567 autorun, for command interpreter, 103 archive attribute, 373, 394, 395 AutoRun.INF file, viewing in Notepad, 38 and XCopy command, 385 AUX (auxiliary device), 358 Arguments property, of WScript object, 177 ARP utility, 292 ASCII characters B copying files as, 357 background color extended, for box drawing, 27 in command window, 28, 130–131 Asp4Hs, 198 registry setting for, 102–103 ASP.NET, 5, 551 backup assign command (DiskPart), 229 best practices, 619 Assoc command, 387–388 of EFS certificate and keys, 401 command extensions for, 104 with WBAdmin utility, 383–384 ASSOC, for WMIC command, 46 of Windows, Volume Shadow Service for, 270 associating folder to drive, 268–269 of WMI repository, 65 associators, of current alias, 46 Backup mode, of AuditPol utility, 494 BACKUP objects, for AppCmd utility, 567
38400bindex.fm Page 645 Monday, December 17, 2007 10:22 PM
BASE SEGMENT • CHECKPOINT FILE 645
base segment, for EMM, 107 Blaster virus, 504 Basic Input/Output System (BIOS), active partition and, BMTMicro, 542 229 bookmarks BAT file extensions, 134 for registry entry, 71 Batch File Compiler 5.2, 196, 196 in scripts, 200 batch files, 21, 25, 99, 134–148 boot command (SC), 60 adding debug information, 149–152, 151 Boot Configuration Data Store Editor (BCDEdit), administrator use of, 149 417–421, 424 best practices, 618–620 boot configuration, recovering from bad, 419 Call command, 135–136 boot time, disk checks at, 397–398 combining with AT utility, 215–217 BootConfig alias (WMIC), 48 For command, 139–142 Boutell, Thomas, Windows and Linux Integration, 542 Echo command, 138 box drawing, extended ASCII characters for, 27 executing automatically, 203 bps (bits per second), 118 Exit command, 138 Break command, 134 fault tolerance for after hours, 220–221 break disk command (DiskPart), 230 ForFiles utility, 138–139 bridge command (NetSH), 170 Goto command, 142 Bridge context (NetSH), 169 identifying, 152–155 BrineSoft, 199 If statement, 142–146 buffer size interactive processing in, 136–138 and command storage, 27 Notepad for editing, 191 for FTP data transfer, 432 Pause command, 146 Quick Batch File Compiler for, 196–198, 197, 198 recursion in, 135 tag">C Rem command, 147 C-Point Antechinus JavaScript Editor, 198, 199 for removing temporary files, 217–218 CAB (cabinet) file format, 360, 522 vs. scripts, 183 opening file in, 366 Shift command, 147 cache file, 241 testing, 148–156, 583 CACLs utility, 407 TimeOut utility, 147 Call command, 135–136 variable substitution, 141–142 command extensions for, 104 WaitFor utility, 148 CALL, for WMIC command, 46–47 batch language, in WinOne, 542 case sensitivity batch mode, for scripts, 164, 165 of command line switches, 24 Batch Scripts for Windows site, 162 in FindStr utility, 406 baud, 118–119 of functions, 18 BCDEdit command, 417–421, 424 of NBTStat switches, 297 Behavior mode, for FSUtil command, 238–240 of RSM utility, 263 BELOWNORMAL priority, for starting application, 125 categorizing files, 395 best practices, 617–620 CD (ChDir) command, 226–227 backup, 619 CDROM alias (WMIC), 48 batch files and scripts, 618–619 centralized data store, 155–156 changing user accounts, 619–620 CER file, 400 data verification, 617 Challenge-Handshake Authentication Protocol (CHAP), help, 617–618 password for iSCSI, 251 testing, 618 CHANGE command (Route utility), 310 binary format /Change parameter, for SCHTasks command, 209–210 comparing files in, 367 Change utility, for logons, ports, and users, 182 converting PE format to, 127–128 Changed files (RoboCopy), 376 copying files in, 357 CHAP (Challenge-Handshake Authentication Protocol), editing, 192 password for iSCSI, 251 binary transfer mode, for TFTP, 315 character sets, WinVi support of multiple, 192 binary value, 79 characters, range in regular expressions, 407 BIOS (Basic Input/Output System), active partition and, CHCP utility, 110 229 ChDir (CD) command, 226–227 BIOS alias (WMIC), 48 command extensions for, 104 bit bucket, 358 Check Disk dialog box, 398 bits per second (bps), 118 checklists, 221 BlastCln utility, 504–505 checkpoint file, 365
38400bindex.fm Page 646 Monday, December 17, 2007 10:22 PM
646 CHECKSUM MODE • COMPUTER MANAGEMENT CONSOLE
checksum mode, for system database, 364 command interpreter, 99–128 ChgLogon utility, 182 debugging utilities, 127–128 ChgPort utility, 183 DOS utilities, 114–126 ChgUsr utility, 183 modifying AutoExec.NT, 109–113 child processes, ending, 13 modifying Config.NT, 105–109 CHK file extension, 365 SetVer for application compatibility, 113–114 ChkDsk utility, 396–397 switches, 100–105 ChkNTFS utility, 397–398 command line, 3, 4–5, 585 CHM files, 18 alternative methods for using, 22–23 Choice command, 136–138 changing, 146–147 Cipher utility, for encrypted files, 398–401 clearing display, 128 circumflex (^), in regular expressions, 407 commercial products to enhance, 542 cl (clear-log) command (WEvtUtil), 454 creating ODBC data source at, 390–391 clean command (DiskPart), 230 DOS vs. Windows, 539 CLEAR command (AppCmd), 571, 572 driver installation from, 332 Clear mode, of AuditPol utility, 494 editing file at, 191 Clear to Send (CTS) output handshaking, 120 help for, 133 clearing screen display, 128 interface alternative, 540, 540, 541 client machine redirecting output to Clipboard, 128 connection to Server Core for maintenance, 40 WinOne, 541–542, 542 for managing IIS, 565–566 working at, 21, 128–134 Clip utility, 128 command line devices, 358 Clipboard command line graphics, printing, 111–112 redirecting command line output to, 128 command line reference, for SCRegEdit script, 76, 77 sending file to, 524 command string, processing with command interpreter, CLOCK$ device, 358 101 CLS command, 128 command window clusters, recovering lost, 396 changing title of, 134 clusters per volume, 116 color of, 130–131 cmd command (NetSH), 170 configuring, 26–28, 585 CMD.EXE, 12, 99, 539 COMMAND.COM, 524 commands supported by, 29–30 commands, 584 internal commands, 29 editing previous, 131–132 switches, 100–105 internal vs. external, 29–30 CmdKey utility, 129–130 in PromptPal, 540, 541 CMStP utility, 495 redirecting output, 380–381 code page, 120 remote execution setting number with CHCP utility, 110 with Telnet, 442–443 Code Project article, 446 with WinRS utility, 431–432 color comment command (NetSH), 170 of command window, 28, 130–131 comments common Windows settings, 78–79 in batch file, 147, 619 for Remote Desktop displays, 33 in files from developers, 523 Color command, command extensions and, 104 for shares, 10 color values, 78 Common Gateway Interface (CGI), 5, 551 COM (communication device), 358 Community-Submitted Scripts Center, 205 COM (Component Object Model) servers, 351 Comp utility, 355–356 COM controls, 160 Compact utility, 401–402 COM port, configuring, 118 comparing COM+ applications, replicating, 61–62 disk contents, 114 combining files files, 355–356 AT utility for batch files, 357 with FC utility, 367–368 with Copy command, 357 XML files, 546 Comma Separated Value (CSV) format, 155, 156 compatibility databases, SDBInst utility for managing, creating with script, 186–189 352 from DriverQuery command, 342 compiling batch files, 191 for event trace logs, 515 Component Object Model (COM) servers, 351 for system information, 423 compressing files, 359–360, 366, 401–402 command extensions, 104–105 computer clock, and automated tasks, 221 Command History, 27 Computer Management console, 11, 22 38400bindex.fm Page 647 Monday, December 17, 2007 10:22 PM
COMPUTER MODE • CSPRODUCT ALIAS (WMIC) 647
COMPUTER mode, of Net utility, 275 control command (SC), 59 Computer Name, default setting, 349 Control Panel computer objects absence of, 5–6 in Active Directory, 469 Administrative Tools folder, 22–23 displaying information about, 473–477 Power Options applet, 87 DSMod utility for editing, 477 conventional memory, 322–323 DSQuery utility for, 480 file handles and, 108 %COMPUTERNAME% environment variable, 46, 153, convert basic command (DiskPart), 230 154 convert dynamic command (DiskPart), 230 ComputerName property, of WshNetwork object, 180 convert gpt command (DiskPart), 230 computers. See also servers convert mbr command (DiskPart), 230 client machine Convert utility, 227–228 connection to Server Core for maintenance, 40 copy and paste, to reduce typing, 617 for managing IIS, 565–566 Copy command, 356–357 locking, 10 Copy CON: command, 191 shutdown, 60–61 copy, of registry section, 73 ComputerSystem alias (WMIC), 48 COPYCMD environment variable, 121 properties, 46 copying ComputerTechnicalTutorials Web site, 161 disks, 114 ComputerWorld, 438 files, 356–357 COMRepl utility, 61–62 with RoboCopy, 370–376 CON device, 358 with XCopy utility, 385–387 Mode utility to configure, 120 symbolic links, 357 config command (SC), 56–57 copyright information in files, 127 CONFIG files for IIS, 574–580 corruption, checking for, 445 Administration.CONFIG file, 579–580 cost, of route, 310 ApplicationHost.CONFIG file, 558–559, 559, 577–579 Count() method, of WshArguments object, 179 hierarchy, 574–575 countdown at boot, for running ChkDsk, 398 Web.CONFIG file, 574–577 counters. See performance counters CONFIG mode, of Net utility, 276 country code, for users, 286 CONFIG objects, for AppCmd utility, 567 CPU alias (WMIC), 48 CONFIG SERVER mode, of Net utility, 276 CPUTIME filter, for TaskKill and TaskList, 511 Config.NT file, 99, 100 crackers custom for application, 113 archive attribute changes and, 395 displaying commands, 107 and shared files, 412 modifying, 105–109 statistics on activities, 300 tricks and techniques, 586, 588 CRC, 526 configProtectedData element, in Create a Shared Folder Wizard, 288 ApplicationHost.CONFIG file, 578 create command (SC), 58–59 configSections element, in ApplicationHost.CONFIG CREATE, for WMIC command, 47 file, 578 create (LogMan), 456 Config.SYS file, 106 Create mode, for EventTriggers utility, 448–449 CONFIGURE command (AppCmd), 571, 572 Create New Task dialog box, 12 confirmation identifier, activating Windows with, 67 /Create parameter, for SCHTasks command, 205–207 Connection Manager Service Profile (CMStP), 495 create partition efi command (DiskPart), 230 connections, 425 create partition extended command (DiskPart), 230–231 for Remote Desktop, 22, 31–35 create partition logical command (DiskPart), 231 creating, 31–32 create partition msr command (DiskPart), 231 display settings, 33, 33 create partition primary command (DiskPart), 231 performance, 34–35, 35 create volume raid command (DiskPart), 231–232 programs, 34, 35 create volume simple command (DiskPart), 232 resources mapping, 33–34 create volume stripe command (DiskPart), 232 consoles, 22 createnew (FSUtil File mode), 241 configuring, 77–83 CreateObject() method, of WScript object, 177, 178 contact object CREATEPOOL mode, of RSM utility, 267 in Active Directory, 469–470 CreateShortcut() function, 43 displaying information about, 473–477 CreateShortcut() method, of WshShell object, 179 DSMod utility for editing, 477 Credential Security Support Provider (CredSSP), 75 DSQuery utility for, 480 cross-training, 221 continue command (SC), 56 CScript utility, 8, 163 CONTINUE mode, of Net utility, 276–277 running scripts with, 164–165 control characters, 357 CSProduct alias (WMIC), 48 38400bindex.fm Page 648 Monday, December 17, 2007 10:22 PM
648 CSV FORMAT • DIRECTORIES
CSV (Comma Separated Value) format, 155, 156 del (erase) command, 104 creating with script, 186–189 delayed variable expansion, 104 from DriverQuery command, 342 DELETE, for WMIC command, 47 for event trace logs, 515 delete (LogMan), 456 for system information, 423 DELETE command (AppCmd), 571, 572 Ctrl+Alt+Del key combination, 10 delete command (NetSH), 170 Ctrl+Alt+Del to Log On message, 6 DELETE command (Route utility), 310 Ctrl+Z (end-of-file character), 132 delete command (SC), 58 CTS (Clear to Send) output handshaking, 120 delete disk command (DiskPart), 232 current directory, 226–227, 259 Delete mode, for EventTriggers utility, 449 cursor, size of, 26 /Delete parameter, for SCHTasks command, 207–208 delete partition command (DiskPart), 232 delete volume command (DiskPart), 232 D DeleteEnvironmentVariable() method, of WshShell data files object, 179 finding, 404 DELETEPOOL mode, of RSM utility, 267 modifying, 115, 115 deleting opening by scripts, 178 applications, 347–350 printing, 333 computer from domain database, 275 data redirection, 380–381 credentials, 130 Data Set Ready (DSR) output handshaking, 120 directories, 262–263 Data Terminal Ready (DTR) output handshaking, 120 files, 358–359 data verification, best practices, 617 keys in hive, 73 databases objects in Active Directory, 484 for Active Directory, managing, 485–486 temporary files, with batch file, 217–218 creating output for, 155–156, 156 delimiter set, for For command, 141 hard drives as, 247 dependencies, enumerating for service, 60 for Web site content, 563 Depends (Dependency Walker), for viewing DLLs, 19, 19 Datafile alias (WMIC), 48 description command (SC), 57 Date command, 131 descriptive data file header, creating, 152–155 %DATE% environment variable, 155 desktop, common settings, 91–93 daylight savings time, 335 Desktop alias (WMIC), 48 DaysOfMonth argument, for WMIC job, 214 DesktopMonitor alias (WMIC), 49 DaysOfWeek argument, for WMIC job, 214 Detach mode, for FltMC utility, 237 DCOMApp alias (WMIC), 48 detail disk command (DiskPart), 232 DCPromo utility, 466 detail partition command (DiskPart), 232 DDF (Diamond Directive File), 360 detail volume command (DiskPart), 232 DDLs, maintaining multiple versions, 65 device drivers. See drivers DEALLOCATE mode, of RSM utility, 264 DeviceMemoryAddress alias (WMIC), 49 DEBUG environment variable, 149 DHCP (Dynamic Host Configuration Protocol), 4, 294, debug information, adding to batch files, 149–152, 151 349 Debug utility, 127 DHCP class identifiers, 295 debugging, AppCmd utility information for, 571 diag command (NetSH), 170 debugging mode, for scripts, 164 Diag context (NetSH), 169 debugging scripts diagnostics, PING for, 309 in Script Editor 2.1, 200 dial-up networking, 439–440 utilities for, 183 dialog boxes, 588 debugging utilities, 127–128 Diamond Directive File (DDF), 360 decompiler, 197 Diantz utility, 359–360 decompressing files, with Expand utility, 366–367 Dir command, 29, 402–404 default printer (PRN), 358 with last access date, 538 default settings, of Server Core, 348–349 directories, 393 default subnet mask, 310 associating to drive, 268–269 Default Web Site, 558 changing, 226–227 file order, 562 changing access, 407–412, 408 IISStart.HTM file, 562 changing attributes, 394 Defrag utility, 228–229 copying all files in current, 385–386 defragmentation, of database, 363–364 copying files between, 356–357 defragmenter job, scheduling with AT utility, 215 creating, 258 Del command, 358–359 deleting, 358 38400bindex.fm Page 649 Monday, December 17, 2007 10:22 PM
DIRECTORY ATTRIBUTE • DSQUERY UTILITY 649
determining current, 226–227 documentation determining rights for, 44, 44 overcoming errors, 306 displaying structure with Tree utility, 269–270 of testing, 616 enabling speed typing of name, 102 unexpected shutdown, 61 finding dollar sign ($), in regular expressions, 407 with Dir command, 402–404 domain controller, promoting server to, 466 with Where utility, 414–415 domain database, adding computer to, 275 inheritance rights of, 410 Domain Globally Unique Identifier (GUID), 466 moving, 368–369 Domain management command (NTDSUtil), 485 names, changing, 369–370 Domain Membership, default setting, 349 opening remote with Append utility, 225–226 Domain Name System (DNS), 4 recursive processing of tree, 104 discovering information, 296 removing, 262–263 SCRegEdit for managing, 76 as reparse points, 245 DOS 8.3 naming convention, 373 for scripts, 176 for copying files, 357 sharing, 288 creating destination file with, 386 status of, 396–397 DOS (Disk Operating System), 100, 192 storing and retrieving, 262 application requirement of specific, 113 virtual, 575 command prompt, vs. Windows, 539 XCopy to create structure, 386 running applications, 107 directory attribute, 395 setting location, 106 directory completion character, 103 utilities, 114–126 Directory Information Tree (DIT) database, restoring, 485 DiskComp, 114 Directory Services, WMIC NTDomain alias for man- DiskCopy, 114–115 aging, 466–467 Edit, 115, 115 Directory Services Query (DSQuery) utility, 478–484 Format, 115–117 directory tree, creating, 373 LoadFix, 117 dirty bit, 398 Logoff, 117–118 dirty drives, 397 Mode, 118–121 Dirty mode, for FSUtil command, 240 Set, 121–123 disable8dot3 (FSUtil Behavior mode), 239 SetX, 123–124 disablecompression (FSUtil Behavior mode), 239 Start, 124–126 disabled user account, 472 Ver, 126 disableencryption (FSUtil Behavior mode), 239 Vol, 126 disablelastaccess (FSUtil Behavior mode), 239 DOS Protected Mode Interface (DPMI), 111 Disconnect mode, of OpenFiles command, 412–413 DosKey utility, 131–133 disconnecting active session, with TSDiscon utility, DosX utility, 111 436–437 downtime, user account changes during, 619 Disk Operating System (DOS), 100 DPMI (DOS Protected Mode Interface), 111 DiskComp utility (DOS), 114 drag and drop, in Script Editor 2.1, 200, 201 DiskCopy utility (DOS), 114–115 drive letter DiskDrive alias (WMIC), 49 assigning long paths to, 226 DiskPart command, 229–234 associating directory with, 268–269 DiskPerf utility, 234–235 DriverQuery command, 342–343 DiskQuota alias (WMIC), 49 drivers DiskRAID utility, 235 DriverQuery command for information on, 342–343 disks. See floppy disks; hard drives unattended installation with PnPUnattend utility, DISMOUNT mode, of RSM utility, 265–266 332 dismounting drives, before formatting, 116 verifying, 504, 506–508 display name, of service, 59 DS utilities, 586 Display Properties dialog box, 77, 80 DSAdd utility, 467–473 distinguished name, for Active Directory objects, 468 DSGet utility, 486, 487 Distributed Component Object Model (DCOM) applica- DSMod utility, 477, 487 tions, 48 DSMove utility, 477 Distributed Link Tracking (DLT) Client service, 243 DSN file, 390–391 Distributed Management Task Force (DMTF), 45 DSQuery utility, 478–484, 486, 487 DllInstall function, 351 for * (all objects), 484 DLLs, RunDLL32 utility for accessing, 18–20 for computer objects, 480 DLT (Distributed Link Tracking) Client service, 243 for contact object, 480 DMAChannel alias (WMIC), 49 for group object, 481 DMTF (Distributed Management Task Force), 45 for ou (organizational unit), 481 DNS Resolver Cache, purging, 295 for partition object, 483 38400bindex.fm Page 650 Monday, December 17, 2007 10:22 PM
650 DSR OUTPUT HANDSHAKING • EXEC COMMAND (NETSH)
for quota object, 483 encryptpagingfile (FSUtil Behavior mode), 239 for server object, 481–482 end-of-file character (Ctrl+Z), 132 for site object, 481 for Copy command at console, 357 for user object, 482–483 end of line character DSR (Data Set Ready) output handshaking, 120 for For command, 141 DSRm utility, 484 in WinVi, 193 DTR (Data Terminal Ready) output handshaking, 120 /End parameter, for SCHTasks command, 211 dump command (NetSH), 170 ending, tasks, 12 DWORD value, 79 EndLocal command, command extensions and, 104 dynamic disk, removing, 232 EnumDepend command (SC), 60 Dynamic Host Configuration Protocol (DHCP), 4, 294, EnumNetworkDrives() method, of WshNetwork object, 349 180 class identifiers, 295 EnumPrinterConnections() method, of WshNetwork dynamic performance data, 454 object, 180 dynamic tracking, for RPCPing, 314 environment mixed, 438, 542 and software selection, 545 E for scripts, 182–183 EBCDIC (Extended Binary Coded Decimal Interchange Environment alias (WMIC), 49 Code) character sets, 192 environment variables, 121–123, 583, 588 ECHO command, 135, 138, 149 adding, 83 redirecting output of, 220 deleting, 179 Echo() method, of WScript object, 179 enabling delayed expansion, 102 Echo Request message, 308 JavaScript to access, 189 echo, turning off, 101 for path, 261 ECMA (European Computer Manufacturer's Associ- in registry, 83 ation) standard, 160 retrieving, 179 ECMAScript, 160 setting, 180 Edit String dialog box, 83 SetX utility for, 123–124 Edit utility (DOS), 115, 115 for WinRS utility, 431 editing Environment Variables dialog box, 83, 121 files, with Edlin utility, 360–361, 361 environments, custom for running utility, 125 with Notepad+, 194, 194–195 ep (enum-publishers) command (WEvtUtil), 452 Notepad for, 191 epl (export-log) command (WEvtUtil), 453 previous commands, 131–132 Erase command, 358–359 with WinVi, 192–193, 193 error events, 445 EditPlus, 195 error handling, for batch files and scripts, 220–221 Edlin utility, 360–361, 361 error messages, from HIMEM.SYS, 109 EFI (Extensible Firmware Interface), active partition and, error reports, 341 229 configuring, 352–353 EFI partition, creating, 230 ErrorLevel clause, of If statement, 137–138, 143 EFS (Encrypting File System) Read-After-Write (RAW) escaping characters, in regular expressions, 407 mode, 371 ESEnTUtl utility, for repairing system databases, 361–366 EFS recovery agent key, 400 Ethernet, statistics, 300 EJECT mode, of RSM utility, 266 European Computer Manufacturer's Association EJECTATAPI mode, of RSM utility, 267 (ECMA) standard, 160 ejecting removable media, 539 event logs, 446 el (enum-logs) command (WEvtUtil), 450 accessing, 55 email, automating, 542–544 for Server Core, 450 email message header, 544 Event Trace logs, converting, 515–516 Emergency Management Services (EMS), 417–418, 419 Event Viewer console, 446 emergency shutdown, 538 EventCreate utility, 446–447 EMM386.EXE, 106 events, 445 EMS (Emergency Management Services), 417–418, 419 managing, with WEvtUtil utility, 450–454 EMS (Expanded Memory Specification), 107 of objects, 176 encrypted files EventTriggers utility, 447–450 Cipher utility for, 398–401 Create mode for, 448–449 copying, as unencrypted, 386 Delete mode for, 449 Encrypting File System (EFS) Read-After-Write (RAW) Query mode, 449–450 mode, 371 Exe2Bin utility, 127–128 encryption key, defining new, 400 exec command (NetSH), 170 38400bindex.fm Page 651 Monday, December 17, 2007 10:22 PM
EXECUTABLE FILES • FIND DIALOG BOX (REGEDIT) 651
executable files, 585 File DUMP mode, for system database, 364–365 checking for modifications, 355 file extensions, 522 converting, 127–128 File mode, for FSUtil command, 240–241 creating with Batch File Complier 5.2, 196, 196 FILE mode, for Net utility, 277 relationships between, 533 file names viewing hidden information in, 127 changing executing scripts, time interval to stop, 166 with Move command, 368–369 ExeScript, 199 with Ren command, 369–370 Exit command, 138 wildcard characters for, 359 exit command (DiskPart), 232 file Properties dialog box, 14, 394 Expand utility, decompressing files with, 366–367 File Replication Service (FRS), 243 expandable string value, 80 file system Expanded Memory Specification (EMS), 107 monitoring with FSUtil command, 238–250 ExpandEnvironmentStrings() method, 189 statistics on, 241 expiration date for volume formatting, 116 of license, 66 File Transfer Protocol (FTP) utility, 432–433 of user accounts, 286, 472 file types, determining and creating, 388 Export Registry File dialog box, 71, 73 FileForum Web site, 525 exporting files, 393 power scheme to file, 330 changing access, 407–412, 408 system data store to external file, 419 changing attributes, 394 extend command (DiskPart), 233 checking integrity, 526–527, 527 extended ASCII characters, for box drawing, 27 comparing Extended Binary Coded Decimal Interchange Code with Comp utility, 355–356 (EBCDIC) character sets, 192 with FC utility, 367–368 extended memory, HIMEM.SYS driver for, 108–109 compressing, 359–360, 366, 401–402 extended mode, for More utility, 382, 383 copying, 356–357 extended partition, creating, 230–231 with RoboCopy, 370–376 extended status of service, 56 with XCopy utility, 385–387 Extensible Firmware Interface (EFI), active partition and, copyright information in, 127 229 decompressing, 366–367 eXtensible Markup Language (XML), 160 deleting, 358–359 Extensible Storage Engine Technology Utility determining rights for, 44, 44 (ESEnTUtl), 361 displaying contents, 379–383 external code,
652 FIND UTILITY • GROUP MODE
Find utility, 404–406 Repair mode, 244 findbysid (FSUtil File mode), 240 ReparsePoint mode, 244–245 finding Resource mode, 245–247 files and directories Sparse mode, 247–248 with Dir command, 402–404 Transaction mode, 248 with Where utility, 414–415 USN mode, 248–249 third-party utilities, 528 Volume mode, 249–250 Windows directory, 100 FTP servers, managing, 432–433 FindStr utility, 404–406 FType command, 387, 388 Finger utility, 293 command extensions and, 105 fingerprints, creating for system files, 526 full screen mode, for console window, 26 firewall, 8, 503 FullName property, of WScript object, 177 allowing iSCSI initiator through, 251 Fully Qualified Domain Names (FQDN), 300, 500 checking status, 554–555, 555 function keys, in DosKey utility, 131–132 sendEmail utility blocked by, 543 functions, case sensitivity of, 18 firewall command (NetSH), 170 Firewall context (NetSH), 169 FixBoot utility, 233 G FixMBR utility, 233 gateway, 310 flags, for iSCSICli utility, 257 GET, for WMIC command, 47 flash drives, 225 Get-Credential command, 566 floppy disks GET ITEMS mode (WBAdmin), 384 comparing contents, 114 Get mode, of AuditPol utility, 492 copying, 114 GetDisplayName command (SC), 59 format size, 117 GetEnvironmentVariable() method, of WshShell object, flow control, in batch file, 142 179 FltMC utility, 235–237 GetKeyName command (SC), 59 flush command (NetSH), 170 GetMAC utility, 273–274 folders. See directories GetObject() method, of WScript object, 177, 178 fonts, for command window, 27 GetScriptEngine() method, of WScript object, 179 For command gl (get-logs) command (WEvtUtil), 450 in batch files, 139–142, 218 gli (get-log-info) command (WEvtUtil), 453 command extensions and, 104 Global Catalog (GC) servers, searching for, 482 for complex file iteration, 140–141 Global Unique Identifiers (GUIDs) variable substitution with, 141–142 obtaining list for power configurations, 328–329, 329 foreground color for video adapter, 84 in command window, 28, 130–131 Globally Unique Identifier (GUID), Domain, 466 registry setting for, 102–103 Google, 528 foreground policy applications, 497 Goto command forest root, searching, 478 in batch file, 135, 142 ForFiles utility, 138–139 command extensions and, 105 Format utility (DOS), 115–117 GOTO :EOF statement, 135 formatted printout, from Notepad, 327 gp (get-publisher) command (WEvtUtil), 452 formatting hard drives, 115–117 GPResult command, 496 formatting output, with XSL file, 213, 213 gpt attributes command (DiskPart), 233 FQDN (Fully Qualified Domain Names), 300, 500 GPT partition style, 230 fragmentation, of hard drive, 228–229 GPUpdate utility, 496–497 freeware utilities, 523 GrafTabl utility, 111 FrontPage extensions, 574 graphical user interface (GUI) FRS (File Replication Service), 243 eliminating, 3 FSDir alias (WMIC), 49 maintenance issues, 4 FSInfo mode, for FSUtil command, 241–242 maintenance tasks with, 40 FSUtil command, 238–250 for Server Core IIS setup, 566 Behavior mode, 238–240 graphics characters, enabling support, 111 Dirty mode, 240 Graphics utility, 111–112 File mode, 240–241 greater than (>) sign, for output redirection, 380 FSInfo mode, 241–242 Group alias (WMIC), 49 Hardlink mode, 242 group membership, of users, 487 ObjectID, 242–243 GROUP mode, of Net utility, 277–278 Quota mode, 243–244 38400bindex.fm Page 653 Monday, December 17, 2007 10:22 PM
GROUP OBJECT • IF STATEMENT 653
group object High Memory Area (HMA), 106 in Active Directory, 470 HIGH priority, for starting application, 126 displaying information about, 473–477 HIMEM.SYS driver, for extended memory, 108–109 DSMod utility for editing, 477 history feature, from DosKey utility, 131 DSQuery utility for, 481 hive, 70, 71 group policy HKEY_CLASSES_ROOT hive, 327, 327 managing, 496–497 \.JS, 161 obtaining results, 496 \JSFile\Shell\Open\Command, 161 setup for Windows Update, 42 \JSFile\Shell\Open2\Command, 161 groups, denying right to use share, 10 HKEY_CURRENT_USER hive, 73 GUI. See graphical user interface (GUI) \Control Panel\Accessibility, 89–91 GUI utilities, 17–18 \Control Panel\Colors, 78–79 GUID (Global Unique Identifier) \Control Panel\Desktop, 80–82 Domain, 466 \Control Panel\Input Method, 91–93 for video adapter, 84 \Control Panel\International, 93–96 \Control Panel\Keyboard, 85 \Control Panel\Mouse, 86–87 H \Control Panel\PowerCfg, 87–88 hard drives, 225 \Environment, 83 as databases, 247 \Network\I, 89 disk checks at boot time, 397–398 \SOFTWARE\Microsoft\Command Processor, 103 dismounting before formatting, 116 HKEY_LOCAL_MACHINE hive, 73 erasing data on, 117 \SOFTWARE\Microsoft\Command Processor, 103 file recovery from bad, 369 \SOFTWARE\Microsoft\Windows\Current- formatting, 115–117 Version, \WindowsUpdate\Auto Update, 41 improving access performance, 228–229 \SYSTEM\CurrentControlSet managing partitions, 229–234 \Control\Session Manager, 398 performance of, 234–235 \Control\Session Manager\Environment, 83 removing data from unused space, 401 \Enum\PCI, 84 virtual, accessing on Internet sites, 250 \Hardware Profiles\001\System\CurrentCon- hard links, creating, 259–260 trolSet\Control VIDEO, 84 Hardlink mode, for FSUtil command, 242 \Services\SharedAccess\Parameters\Firewall- hardware Policy, 251 modifying setup, 84–89 \Services\W32Time, 335 keyboard, 85 HLP files, 18 mouse, 86–87 HMA (High Memory Area), 106 network drive mappings, 89 home directory, for user accounts, 287, 472 power configuration, 87–88 hop, 305, 306 video, 84–85 host routes, 310 resetting within Terminal Services, 435 Hostname utility, 293 header information, for system database, 365 hostnames, displaying list, 488 help hot fixes section, 423 for AppCmd utility, 570 HTML Application (HTA), 198 best practices, 617–618 HTML Help (HH.EXE) utility, 18 command line switch for, 23–25 HTTP proxy, 314 for command prompt, 133 ToggIt Command Line Helper for, 536–538, 537 help command (DiskPart), 233 I Help command (NTDSUtil), 485 ICACLS command, 44, 407–412, 566 HELP mode, of Net utility, 278 ICS (Internet Connection Sharing), 426 Help utility, 133 IDEController alias (WMIC), 49 helper Dynamic Link Library, 166, 167 identity tracking, for RPCPing, 314 HELPMSG mode, of Net utility, 278 IDLE priority, for starting application, 125–126 HH.EXE (HTML Help) utility, 18 IETF (Internet Engineering Task Force), 75 hibernation state, 61, 330, 539 If command, 105 hidden attribute, 395 IF ERRORLEVEL command, 588 and file compression, 401 If statement for partition, 229 in batch file, 142–146 hidden files, 395 ErrorLevel clause of, 137–138 copying, 386 38400bindex.fm Page 654 Monday, December 17, 2007 10:22 PM
654 IGMP • JOB ALIAS (WMIC)
IGMP (Internet Group Multicast Protocol), timeout for, installing, 551–558 296 ASP support, 556, 556 IIS. See Internet Information Server (IIS) PHP and FastCGI support, 556–558 IIS-ApplicationDevelopment, 554 standard process, 552–555 IIS-ISAPIFilter, 554 managing IIS Web Server role, 552 with AppCmd utility, 566–573 IISStart.HTM file, 562 with client, 565–566 im (install-manifest) command (WEvtUtil), 452 with W3WP utility, 573 IMAGENAME filter, for TaskKill and TaskList, 510 support in Server Core, 5 immediate update of Windows, 41 Internet Protocol impersonation type, for RPCPing, 314 IPConfig utility for managing, 293, 293–295 import command (DiskPart), 233 version 4 (IPv4) importing forcing PING to use, 308 registry data, 71 forcing Route utility to use, 311 system data store, 419 version 6 (IPv6), 291, 295 inactive command (DiskPart), 233 forcing PING to use, 309 Include statement, 162 forcing Route utility to use, 311 indexing service, sparse files for, 241 Internet Protocol (IP) Security Protocol Working Group, \inetpub\wwwroot folder, 563, 574 75 informational events, 445 Internet Server Application Programming Interface inheritance rights, of directories, 410 (ISAPI) support, 551 input for commands Internet Small Computer System Interface (iSCSI), 225 optional, 23 practical usage tips, 250 redirection, 380 Internet Storage Name Service (iSNS) server, 250 insert mode, for DosKey, 133 interpreter, for scripts, 25, 163 INSPECT command (AppCmd), 571, 572 interrogate command (SC), 56 INSTALL command (AppCmd), 571, 572 IntranetJournal Web site, 161 Install.EXE, 38 intrusion protection, 503–509 installing INVENTORY mode, of RSM utility, 268–269 applications, 6, 38–39 IOCTL_DISK_PERFORMANCE() function, 234 with MSIExec utility, 343–346 IP. See Internet Protocol Internet Information Server (IIS), 551–558 IP address, IPConfig to renew, 294 standard process, 552–555 IP Security (IPSec) Monitor, configuring, 75 Instances mode, for FltMC utility, 237 IPConfig utility, 293, 293–295 Institute of Electrical and Electronics Engineers (IEEE) IPDeny List command (NTDSUtil), 485 EUI-64 format, 255 IPSec, 256 integrity checking for iSCSI initiator, 255 of database, 364 IQN (iSCSI Qualified Name), 255 of files, 526–527, 527 IRQ alias (WMIC), 50 interactive mode ISAPI (Internet Server Application Programming for iSCSICli utility, 251 Interface) support, 551 for scripts, 165 iSCSI. See Internet Small Computer System Interface Interactive property, of WScript object, 177 (iSCSI) interface command (NetSH), 170 iSCSI initiator, 250, 255 Interface context (NetSH), 169 starting, 251 internal commands, vs. external, 29–30 iSCSICli (Internet Small Computer System Interface international settings, 93–96 Client) utility, 250–258 International Standards Organization/Open Systems arguments, 252–256 Interconnection (ISO/OSI) network model, 273 mappings and flags, 257–258 Internet Connection Sharing (ICS), 426 syntax, 251–252 Internet Engineering Task Force (IETF), 75 iSNS (Internet Storage Name Service) server, 250 Internet Explorer, 6 Itanium computers, and MSR partition, 231 Internet Group Multicast Protocol (IGMP), timeout for, Item() method, of WshArguments object, 179 296 Internet Information Server (IIS), 551, 563 adding content, 563 J CONFIG files, 574–580 JavaScript, 5, 159, 160–161, 584 Administration.CONFIG file, 579–580 code example, 172–174 ApplicationHost.CONFIG file, 558–559, 559, editors, 198 577–579 for mapping network drive, 184–185 Web.CONFIG file, 574–577 verifying setup, 161 editor for, 559 Job alias (WMIC), 50 38400bindex.fm Page 655 Monday, December 17, 2007 10:22 PM
656 LOST CLUSTERS • MYSQL WEB SITE
lost clusters, recovering, 396 Microsoft Compressed file (MSCF), 522 lost files, recovering, 369 Microsoft Fast Zone Transfer (MSXFR), 304 LPD (Line Printer Daemon), 320 Microsoft Installer Executive (MSIExec) utility, 343–346 troubleshooting, 320–321 Microsoft Management Console (MMC), 5 LPQ utility, 320–321, 321 Microsoft Messenger, 279 LPR utility, 320, 321–322 Microsoft Script Debugger, 183 LPT device, 358 Microsoft Script Editor, 163 Lucida Console font, 27 Microsoft Systems Journal Web site, 248 LUN (Logical Unit Number), 257 Microsoft Terminal Server Connection (MSTSC) utility, 426 Microsoft Transform (MST) file, 343 M MIGRATE command (AppCmd), 571, 572 macros minimized window, starting application with, 125 displaying list, 133 Mismatched files (RoboCopy), 376 DosKey to create, 132 MIT Athena Hesiod class, 304 maintenance issues, 39–40 mixed environment, 542 MakeCab utility, 359–360 and software selection, 545 malfunctioning process, ending, 13 MkDir command, 258 Malicious Removal Tool (MRT), 503, 505 command extensions and, 105 "man in the middle" attack, 305 MKLink command, 259–260 Managed Object Format (MOF) Compiler (MOFComp) Mode utility (DOS), 118–121 utility, 63–64 MODULE objects, for AppCmd utility, 567 management requirements, GUI vs. command line, 4–5 moduleProviders element, in Administration.CONFIG MapNetworkDrive() method, of WshNetwork object, 181 file, 579–580 mapping network drive, 183–186 MODULES filter, for TaskKill and TaskList, 511 Master Boot Record (MBR), overwriting, 230 MOFComp (Managed Object Format (MOF) Compiler) Master File Table (MFT), location for, 228 utility, 63–64 maximized window, starting application with, 125 Mono, 563 MBR partition style, 230 MORE environment variable, 121 marking inactive, 233 More utility, 381–383 MD command, 258 Moskowitz, Jeremy, Windows and Linux Integration, 542 Media Access Control (MAC) address, 273–274 MOUNT mode, of RSM utility, 264–265 Mem utility, 111, 322–324, 323, 324 mount points, Label utility for, 258 MemCache alias (WMIC), 50 MountVol utility, 260–261 memory mouse, generic settings, 86–87 conventional, 322–323 Move command, 368–369 file handles and, 108 moving determining status, 322–324, 323, 324 data, with Send To Toys, 524–525 diagnostics in Windows, 531–532 objects, with DSMove utility, 477 fragmentation, 125 MRInfo utility, 296–297 HIMEM.SYS to check, 109 MRT (Malicious Removal Tool), 503, 505 saving with LH command, 112 MSCDEX (Microsoft Compact Disk Extensions), 109, 112 memory space, for Windows application, 125 MSCDEX Virtual Device Driver, 112 MemoryChip alias (WMIC), 50 MSCDexNT utility, 112 memoryusage (FSUtil Behavior mode), 239 MSCF (Microsoft Compressed file), 522 MemPhysical alias (WMIC), 50 MSDN Library Web site, 20 MEMUSAGE filter, for TaskKill and TaskList, 511 MSI file extension, 343 message dialog box, method for displaying, 179 MSIExec utility, 343–346 Message Digest 5 (MD5), 526 MSInfo32 utility, 324–327, 325 MessageBeep() function, 18 MSR (Microsoft Reserved) partition, creating, 231 Metadata cleanup command (NTDSUtil), 485 MST (Microsoft Transform) file, 343 methods, of objects, 176 MSTSC (Microsoft Terminal Server Connection) utility, metrics, of route, 310 426 MFT (Master File Table), location for, 228 MSXFR (Microsoft Fast Zone Transfer), 304 mftzone (FSUtil Behavior mode), 239 multi-string value, 80 Microsoft multicast datagram, TTL threshold for, 297 documentation errors, 306 multicast routers, 296–297 information collection from error reports, 352 multicast routes, 310 rules for utilities, 539 multiplatform requirements, 545 Microsoft Cabinet Software Development Kit, 360 MySQL Web site, 352 38400bindex.fm Page 657 Monday, December 17, 2007 10:22 PM
NACHI VIRUS • OBJECTS 657
N Network Redirector, installing, 113 Network Time Protocol (NTP), 334 Nachi virus, 504 networks, 273 NAME mode, of Net utility, 279 availability applications on, 343 Name property, of WScript object, 177 checking connections, 307–309 names defining tasks on every machine, 219 of files and directories displaying performance statistics, 16, 16 Move command for changing, 368–369 managing with Net utility, 274–288 Ren (Rename) command for changing, 369–370 NetDiag utility for diagnostics, 298–299 of users, obtaining, 487 routing tables manipulation, 309–311 NBTStat utility, 297–298 statistics on, 300, 300–301, 301 nesting command line switches, 24 tracing transmission paths, 304–307, 305 .NET Framework, requirement, 552 tracking path, 316, 316–317 Net Start WUAUServ command, 41 New Connection Wizard, 440 Net Stop WUAUServ command, 42 Newer files (RoboCopy), 376 Net utility, 274–288, 487 NFO files, 326 ACCOUNTS mode, 275 NIC alias (WMIC), 50 COMPUTER mode, 275 NICConfig alias (WMIC), 50 CONFIG mode, 276 nodefaultdriveletter attribute, for partition, 229 CONFIG SERVER mode, 276 NoNags site, 536 CONTINUE mode, 276–277 NORMAL priority, for starting application, 125 FILE mode, 277 Not, with If statement, 143 GROUP mode, 277–278 Notepad, 17 HELP mode, 274, 278 for batch file and script editing, 191 HELPMSG mode, 278 for editing Web server configuration file, 558 LOCALGROUP mode, 278–279 formatted printout from, 327 NAME mode, 279 for viewing AutoRun.INF file, 38 PAUSE mode, 279–280 Notepad+, editing with, 194, 194–195 PRINT mode, 280 NSLookup utility, 302–304 SEND mode, 280–281 NTDomain alias (WMIC), 51 SESSION mode, 281 for managing Directory Services, 466–467 SHARE mode, 8, 281–282 properties, 467 START mode, 282 NTDSUtil utility, 485–486 STATISTICS mode, 282–283 NTEvent alias (WMIC), 51 STOP mode, 283 NTEventLog alias (WMIC), 51 TIME mode, 283–284 NTFS USE mode, 284–285 attributes, 395–396 USER mode, 286–287 benefits, 397 for account setup, 7 converting FAT partition to, 227–228 for password changes, 11 volumes, 49 ToggIt Command Line Helper for, 537, 537 ntfsinfo (FSUtil FSInfo mode), 242 VIEW mode, 287–288 NTLM (Windows NT LAN Manager), 443 Net View utility, 219 NTMSAPI.DLL file, 263 NetBIOS over TCP/IP, 297–298 NTP (Network Time Protocol), 334 NetCfg utility, 421–423, 422 null data, 241 NetClient alias (WMIC), 50 NUL(L) device, 358 NetDiag utility, 298–299 NetLocalGroup command, 7 NetLogin alias (WMIC), 50 O NetProtocol alias (WMIC), 50 ObjectID, for FSUtil command, 242–243 167 NetSH Interface IP Add Address command, 167, objects NetSH Interface IP command, 166 for AppCmd utility, 567–569 NetSH Interface IPv6 6To4 command, 166 creating in Active Directory, 467–473 NetSh Show Helper command, 166 computer objects, 469 166–171 NetSH utility, 8, , 438, 554 contact object, 469–470 300 300–301 301 NetStat utility, , , group object, 470 NetUse alias (WMIC), 50 ou (organizational unit), 470 Network Address Authority (NAA) naming format, 255 quota object, 473 166–171 Network Command Shell (NetSH) utility, user object, 471–472 Network connections, default setting, 349 deleting, 484 network drive, mapping, 89, 183–186 38400bindex.fm Page 658 Monday, December 17, 2007 10:22 PM
658 OCLIST UTILITY • PIFEDIT UTILITY
editing, with DSMod utility, 477 for SetX utility, 124 listing in Active Directory, 473–477 for shared resources, 285 moving, with DSMove utility, 477 for SMTP server account, 544 WSH support for, 176 for user accounts, 275, 286, 287 OCList utility, 553 Active Directory settings, 472 OCSetup utility, 347–350 resetting, 487–488 octet mode, for TFTP, 315 for user context, 446, 448 ODBC (Open Database Connectivity), 355 patches configuring environment, 388–391 applying, 41 creating data source at command line, 390–391 testing after, 221 ODBCConf utility, 388–391 Path command, 261–262 offline command (NetSH), 170 Path Maximum Transmission Unit (PMTU), 307 offload state for network connection, 301 Path Packet Internet Groper (PathPing) utility, 304–307, Older files (RoboCopy), 376 305 OnBoardDevice alias (WMIC), 51 Path property, of WScript object, 177 online command (DiskPart), 234 paths online command (NetSH), 170 absolute or relative, 259 OnScript, 199 assigning long, to drive letter, 226 Open Database Connectivity. See ODBC (Open Database for MSInfo utility, 324 Connectivity) for new directory, 258 open files, deleting shared, 412–414 setting and viewing application, 261–262 OpenFiles command, 412–414, 588 pause OpenTextFile() method, of FileSystemObject object, 189 in screen display operating system, determining version, 126 for Dir command, 403 optional input for commands, 23 with More utility, 381–383 OS alias (WMIC), 51 for Telnet service, 441 ou (organizational unit) Pause command, 146 in Active Directory, 470 pause command (SC), 56 displaying information about, 473–477 PAUSE mode, of Net utility, 279–280 DSMod utility for editing, 477 Payload ID type, for iSCSICli utility, 257 DSQuery utility for, 481 PC World, for XXCopy, 528, 529 output from commands, redirection, 380 PE (Portable Executable) format, 127 overstrike mode, for DosKey, 133 Perfmon utility, 459–460 ownership, of files, 379 performance, 445 added features and, 529 of hard drive, 234–235 P importance of, 455 Package Manager (Windows), PkgMgr utility for improving disk access, 228–229 accessing, 346–347 monitoring, 454–463 "Packed file corrupt" error message, 117 with PerfMon, 459–460 Packet Internet Groper (PING) utility, 307–309 with TypePerf, 461–462 Pagefile alias (WMIC), 51 statistics display for, 14–16, 15 PageFileSet alias (WMIC), 51 Performance console, 455, 459 parameters, for script methods, 177 performance counters, 234 parent directory, 259 adding, 455–456 parity types, for Mode utility, 119 removing, 463 Parse command (SxsTrace), 65 performance logs Partition alias (WMIC), 51 managing, 456–459 partition object reconfiguring, 460–461 displaying information about, 473–477 period (.), in regular expressions, 407 DSQuery utility for, 483 PERL (Practical Extraction and Report Language), 5, 543 partitions permanent environment variables, 83, 121 converting FAT to NTFS, 227–228 permanent route, 309 managing with DiskPart command, 229–234 Permissions dialog box, for registry hive, 72 removing, 232 Petri.co.il Web site, 325, 427 passwords PFX file, 400 for administrator, 6 PHP: Hypertext Preprocessor (PHP), 551 asterisk (*) in script for, 488 installing support in IIS, 556–558 changing, 11 PID (Process Identifier), 14, 204, 300 for DSQuery utility, 479 filter for TaskKill and TaskList, 510 managing with CmdKey, 129–130 PIF (Program Information File), 100, 113 for remote system access, 438 PIFEdit utility, 113 38400bindex.fm Page 659 Monday, December 17, 2007 10:22 PM
PIM • QUICK SHUTDOWN 659
PIM (Protocol Independent Multicast), 297 ending malfunctioning, 13 PING utility, 307–309 obtaining for Terminal Services, 434 request for iSCSI, 256 Process Explorer for examining, 531–533, 532, 533 pipe command, 128, 587 Product alias (WMIC), 52 for data transfer between Active Directory utilities, product key 480 installing, 66 for redirection, 380 uninstalling, 67 PkgMgr utility, 346–347 productivity, 535. See also performance for IIS install, 551 profiles, configuring, with CMStP utility, 495 PnPUnattend utility, 332 Program Information File (PIF), 100, 113 PnPUtil utility, 332 programs. See applications pop-up colors, in command window, 28 progress bar, 344 PopD command, 262, 583 Prompt command, 146–147 command extensions and, 105 PromptPal, 540, 540, 541 popd command (NetSH), 171 properties dialog box, for command window, 26 Popup() method, of WshShell object, 179 Color tab, 28, 29 Popups command (NTDSUtil), 485 Font tab, 27, 28 Port alias (WMIC), 51 Layout tab, 27–28, 28 port number, for iSCSI initiator, 255 Options tab, 26–27, 27 Portable Executable (PE) format, 127 properties, of objects, 176 PortConnector alias (WMIC), 51 protected memory access, 111 ports Protocol Independent Multicast (PIM), 297 Change utility for, 182 protocols, 273 ChgPort for port assignments, 183 statistics, 301 power configuration, 87–88 ProxyCfg, 273 exporting to file, 330 PushD command, 262, 583 Power Options Properties dialog box, Power Schemes command extensions and, 105 tab, 328 pushd command (NetSH), 170 PowerCfg utility, 87, 327–332 Practical Extraction and Report Language (PERL), 5, 543 Pre-Boot eXecution Environment (PXE)-based boot envi- Q ronment, 233 QAppSrv utility, 433–434 Preference dialog box (Notepad+), 195 qc command (SC), 58 primary partition, creating, 231 qdescription command (SC), 58 PRINT command (Route utility), 310 qe (query-events) command (WEvtUtil), 452–453 PRINT mode, of Net utility, 280 qfailure command (SC), 58 Print utility, 333 qfailureflag command (SC), 58 Printer alias (WMIC), 52 QFE alias (WMIC), 52 PrinterConfig alias (WMIC), 52 QFE (Quick Fix Engineering), 42 printers qprivs command (SC), 58 creating connection for local machine, 180 QProcess utility, 434 Net Use command and, 284 QSD (Quick Shutdown), 538–539 printing qsidtype command (SC), 58 command line graphics, 111–112 query (LogMan), 456 line printers for, 320–322 query command (SC), 56 with LPR utility, 321–322 Query mode Notepad for, 17 for EventTriggers utility, 449–450 in WinVi, 192 of OpenFiles command, 413 PrintJob alias (WMIC), 52 /Query parameter, for SCHTasks command, 208–209 priority QUERY PROCESS command, 434 of DNS service (SRV) records, 76 QUERY SESSION command, 434 of process, 14 QUERY TERMSERVER command, 433 privs command (SC), 58 Query utility, 433, 497–500 PRN (default printer), 358 queryallocranges (FSUtil File mode), 240 Process alias (WMIC), 52 queryex command (SC), 56 Process Explorer, 531–533, 532, 533 QueryLock command (SC), 60 Process Identifier (PID), 14, 204, 300 question mark (?) PROCESS mode, for Query utility, 497–498 in AppCmd utility, 561 processes as wildcard character, 359 communication between, 148 Quick Batch File Compiler, 196–198, 197, 198 displaying running, 13, 13–14 Quick Fix Engineering (QFE), 42 ending in Terminal Services, 437 Quick Shutdown, 538–539 38400bindex.fm Page 660 Monday, December 17, 2007 10:22 PM
660 QUICKEDIT MODE • REMOTE DIRECTORIES
QuickEdit Mode, 27 REG_DWORD value type, 79 Quit command (NTDSUtil), 485 RegEdit utility, 18, 70–72, 327 Quit() method, of WScript object, 179 common tasks, 71–72 Quota mode, for FSUtil command, 243–244 working at command line, 72–73 quota object RegEdt32 utility, 18 in Active Directory, 473 REG_EXPAND_SZ value, 80 displaying information about, 473–477 RegIni utility, 77 DSMod utility for editing, 477 Regional and Language Options dialog box, Regional DSQuery utility for, 483 Options tab, 93 quotanotify (FSUtil Behavior mode), 239 registry, 18, 69, 585 quotas, for user disk space usage, 49 command line settings in, 103–104 QuotaSetting alias (WMIC), 52 common value types, 79–80 QUser utility, 500 common Windows Desktop settings, 80–82 QWinSta utility, 434–435 as database, 361 QWORD data type, 80 environment variables in, 83 and JavaScript, 161 method to remove value or key from, 179 R removing ADAP information from, 65 RAID (Redundant Array of Inexpensive Disks), 235 saving and restoring, 73–74 RAID-5 volume, creating, 231–232 scripting, 174–176 random file generator, 524 scripting entries with RegIni utility, 77 range of characters, in regular expressions, 407 time service configuration in, 333 RAR format, 360 Windows color settings, 78–79 ras command (NetSH), 170 writing data to value or key, 180 RAS context (NetSH), 169 Registry alias (WMIC), 53 RASDial utility, 438–439 Registry Editor RASPhone utility, 439–440 for controlling Windows Update time setting, 41 raster fonts, 110 starting and configuring, 70–77 for command window, 27 REG_MULTI_SZ value, 80 RD command, 262–263 REG_QWORD, 80 RDAAccount alias (WMIC), 52–53 RegRead() method, of WshShell object, 179–180 RDNIC alias (WMIC), 53 RegSvr32 utility, 163, 351 RDP file, placing on desktop, 32 for shell extension, 530 RDPermissions alias (WMIC), 53 REG_SZ value type, 79 RDToggle alias (WMIC), 53 RegTLib utility, 62 README file, 38 regular expressions, 407 readonly attribute, 396 in FindStr utility, 405 deleting files marked with, 359 RegWrite() method, of WshShell object, 180 for partition, 229 relative distinguished name, 478 REALTIME priority, for starting application, 126 relative path, 259 rebooting reliable system, 221 after refreshing system policies, 497 ReLog utility, 460–461 with Terminal Services, 437 Rem command, 147, 584 Recover utility, 369 rem command (DiskPart), 234 RecoverOS alias (WMIC), 53 remote access recovery console, 116 with console for maintenance, 40 recovery of database, with ESEnTUtl, 364 setup for, 8 recursion Remote Access Server, 438–440 in batch file, 135 remote administration, of HTTP, 552 for directory tree, 104 remote computer, monitoring for time changes, 334 in searches, 479 Remote Desktop, 426, 427 RECYCLE command (AppCmd), 571, 572 capability for, 8 ReDir utility, 113 connection, 22, 31–35 redirection, 586 creating, 31–32 for ECHO command output, 220 display settings, 33, 33 Redundant Array of Inexpensive Disks (RAID), 235 performance, 34–35, 35
REMOTE MANAGEMENT • SCHEDULING TASKS 661
remote management, 535–536 Resultant Set of Policy (RSoP), 496 Remote Procedure Call (RPC) Ping utility, 311–315 retain command (DiskPart), 234 remote server, DSQuery utility for connecting to, 479 retrieving directories, 262 remote systems reversing sort order of text file, 378 management, 425–432 RFC (Request for Comments), 2782 for DNS, 76 with MSTSC utility, 426 rights, assigning with ICACLS command, 409–410 with TCMSetup utility, 427–428 RmDir command, 262–263 with WinRM utility, 428–430 RmtShare tool, 9 with WinRS utility, 431–432 RndFileC.exe, 524 RegEdit to connect and disconnect, 72 Rob van der Woude Web site, 134 removable media, ejecting, 539 RoboCopy command, 370–376, 385 Removable Storage Management (RSM) utility, 263–269 file classes, 376 ALLOCATE mode, 263–264 file selection options, 373 CREATEPOOL mode, 267 job options, 375 DEALLOCATE mode, 264 retry options, 374 DELETEPOOL mode, 267 roles, 341, 347 DISMOUNT mode, 265–266 default setting, 349 EJECT mode, 266 OCList utility for verifying status, 350–351, 351 EJECTATAPI mode, 267 of Server Core, 347–348 INVENTORY mode, 268–269 Roles command (NTDSUtil), 485 MOUNT mode, 264–265 roll back, log file for, 365 REFRESH mode, 268 root directory VIEW mode, 267–268 Administrators group access to, 411 remove command (DiskPart), 234 changing rights to, 411 Remove Favorites dialog box (RegEdit), 72 rootkits, exploring drive for, 270 Remove mode, of AuditPol utility, 494–495 Route utility, 309–311 RemoveNetworkDrive() method, of WshNetwork object, RouteMon utility, 171 181 routers, multicast, 296–297 RemovePrinterConnection() method, of WshNetwork routing command (NetSH), 170 object, 181 Routing context (NetSH), 169 removing. See deleting RPC/HTTP front-end authentication, flags for, 314 Ren (Rename) command, 369–370 RSM. See Removable Storage Management (RSM) utility repair disk command (DiskPart), 234 RSoP (Resultant Set of Policy), 496 repair levels, for applications, 345–346 RSVP (ReSerVation Protocol), 171 Repair mode RTS (Request to Send) output handshaking, 120 for FSUtil command, 244 Run dialog box, 40 for system database, 364 Run() method repairing system databases, 361–366 of Shell object, 189 reparse point, 244 of WshShell object, 180 ReparsePoint mode, for FSUtil command, 244–245 /Run parameter, for SCHTasks command, 210–211 repeating keystrokes, delay for, 121 RunAs utility, 181–182, 588 Replace utility, 376–377 RunDLL32 utility, 18–20, 584 replicating COM+ applications, 61–62 RWinSta utility, 435 REQUEST objects, for AppCmd utility, 568 Request to Send (RTS) output handshaking, 120 rescan command (DiskPart), 234 S ReSerVation Protocol (RSVP), 171 Safe mode, for maintenance, 40 RESET command (AppCmd), 571, 572 SAM (Security Access Manager) account, 478 RESET SESSION command, 435 Save As dialog box, 17 Reset utility, 435 saving Resource mode, for FSUtil command, 245–247 registry, 73–74 resources registry branch, 71 availability to other users, 281–282 SC Config Schedule Start command, 204 mapping, 33–34 SC QueryEx Schedule command, 204 usage of, 5 SC (Service Control) command, 55–60 restartable mode, for copying files, 371 to configure Task Scheduler, 204 RESTORE command (AppCmd), 571, 572 scalable networking, 301 Restore mode, of AuditPol utility, 494 Scheduled Tasks utility, 204, 216, 216 restoring vs. AT utility, 217, 584 registry, 73–74 scheduling tasks, 26 WMI repository, 65 38400bindex.fm Page 662 Monday, December 17, 2007 10:22 PM
662 SCHTASKS COMMAND • SERVICE HOST (SVCHOST.EXE)
SCHTasks command, 205–211 SDI LPD server, 320 /Change parameter for, 209–210 sdset command (SC), 59 /Create parameter for, 205–207 sdshow command (SC), 59 for defragmenting drive, 215 SEARCH command (AppCmd), 571, 572 /Delete parameter for, 207–208 SecEdit utility, 508–509 /End parameter for, 211 Secure Hashing Algorithm 1 (SHA-1), 526 /Query parameter for, 208–209 security, 44–45, 393, 503 /Run parameter for, 210–211 local security policy configuration, 508–509 screen buffer, lines in, 120 malicious software removal, 505 screen display performance report, 300 changing colors, 130–131 repairing information for set of files, 372 clearing, 128 in RPC, 312 WScript object to send information to, 172 tricks and techniques, 585, 587 screen reader program, 106 verifying drivers, 506–508 screen saver, RunDLL32 utility for installing, 18 verifying system files, 505–506 SCRegEdit script, 9, 69, 70, 74–76, 162 virus protection, 503–509 automatic updates with, 74 BlastCln utility for removal, 504–505 command line reference for, 76, 77 Security Access Manager (SAM) account, 478 Script Editor 2.1, 199–201, 200 Security account management command (NTDSUtil), 485