The Windows 2000 Resource Kit Tools

Activeperl.exe: Active Perl Scripting Language

C-like scripting language ported from UNIX to Windows 2000.

Addiag.exe: Application Deployment Diagnosis

Provides information on current state of software either installed or available for installation on a PC managed by IntelliMirror Software Installation and Maintenance.

Addusers.exe: Add Users

Adds multiple users from a comma-delimited text file.

Apimon.exe: API Monitor

Monitors the API calls made by a process.

Associate.exe

Adds “file extension, executable program” associations to the registry.

Atanlyzr.exe: AppleTalk network device ANaLYZeR

Analyzes AppleTalk Devices.

Atmarp.exe: Windows ATM ARP Server Information Tool

Used to troubleshoot the status of the ATM ARP/MARS Service that ships with Windows 2000.

Atmlane.exe: Windows ATM LAN Emulation Client Information Tool

Used to troubleshoot the status of the ATM LAN Emulation (LANE) client that ships with Windows 2000.

Auditpol.exe: Audit Policy

Enables user to modify the audit policy of local or remote computers

Autoexnt.exe: AutoExNT Service

Allows you to start a custom batch file at startup without having to log on to that computer.

Browmon.exe: Browser Monitor

Monitors the status of browsers on selected domains.

Cachemov.exe: Offline Files Cache Mover

Allows user to move offline files cache to a different drive volume.

Cconnect.exe: Con-Current Connection Limiter

Provides a method of tracking concurrent connection of users and monitoring what computers users are logged into.

Chklnks.exe: Link Check Wizard

Scans all of the shortcut (link) files on a computer and lets user remove inactive ones.

Choice.exe: User Input for Batch Files

Prompts user to make a choice in a batch program.

Cla.msc: Cybersafe Log Analyst

Assists in organizing and interpreting security event logs from Windows 2000 by analyzing and generating detailed reports.

Clearmem.exe: Clear Memory

Forces pages out of RAM.

Clip.exe: Clip To Clipboard

Dumps STDIN to Clipboard

Clippool.exe: Clip Pool

Transparently shares a single logical clipboard among multiple computers.

Cliptray.exe: Clipboard Organizer

Stores and organizes chunks of text that can be copied into text-based files using the Clipboard.

Clusrest.exe: Cluster Quorum Restore Utility

Restores the quorum disk of a cluster, which is not done by a restore process using NtBackup.

Cmdhere.exe: Command Prompt Here

Adds a “CMD Prompt Here” item to some right-click menus displayed by Windows Explorer.

Compress.exe: File Compression Utility

Compresses files.

Confmgr.htm: IP Multicast Conference Management Tool

Manages IP Multicast conferences.

Counters.chm: Windows 2000 Performance Counters Reference

Presents descriptions of all of standard performance counters installed with Windows 2000.

Cpustres.exe: CPU Stress Utility

Consumes processor cycles continuously by executing an endless loop.

Creatfil.exe: Create File

Creates files of a specified size.

Crystal Reports

Enables you to create, view, and distribute presentation-quality or Web-ready reports from varied data sources.

Ctpc.exe: Third-Party QoS Control Agent

Allows an administrator to manage Quality of Service (QoS), including Create, Remove, Update, and Query sessions, from the command prompt.

Ctrlist.exe: Counter List

Lists all objects and counters installed in the system for the given language ID.

Cusrmgr.exe: Console User Manager

Enables editing of many of the Local Users and Groups user properties from the command line.

Defptr.exe: Default Printer

Shows a list of available printers and lets user easily select a default printer.

Delprof.exe: User Profile Deletion Utility

Deletes Windows 2000 user profiles.

Delrp.exe: Delete File and Reparse Points

Deletes a file or directory and any associated NTFS reparse points.

Delsrv.exe: Delete Service

Unregisters a service with the service control manager.

Designed for Windows Logo Program Web site

Describes the technical requirements that must be satisfied by an application to receive the Designed for Windows Logo.

Dh.exe: Display Heap

Displays information about heap usage in a user-mode process or pool usage in kernel-mode memory.

Dhcmp.exe: DH Compare

Compares two dumps of heap usage generated by Dh.exe, matching the backtraces from each file, to find leaks.

Dhcploc.exe: DHCP Server Locator Utility

Locates DHCP servers on a network.

Dhcpobjs.exe: DHCP Objects

In-process server (DLL) that exposes COM interfaces for automating DHCP Server administration.

Diruse.exe: Directory Disk Usage

Determines amount of disk space used by a directory’s contents, similarly to UNIX’s DU.

Diskmap.exe

Displays information about a disk and the contents of its partition table.

Diskpar.exe: Disk Alignment Tool

Finds and modifies the starting sector on a disk to improve disk performance.

Diskuse.exe

Scans a directory tree and reports the amount of space used by each user.

Dmdiag.exe

Saves disk volume configuration to a text file and writes a signature to a disk partition.

Dommon.exe: Domain Monitor

Monitors the status of servers and domain controllers for a domain and its trusted domains.

Drivers.exe: List Loaded Drivers

Displays information on installed device drivers, their files, and their code.

Dumpcfg.exe: Dump Configuration

Simplifies the manual system recovery process associated with storage configuration.

Dumpel.exe: Dump Event Log

Dumps an Event Log to a tab-separated text file.

Dumpfsmos.cmd: Dump FSMO Roles

Dumps the Floating Single Master Operations roles.

Dupfinder.exe: Duplicate File Finder

Locates duplicate files for deletion or renaming.

Dureg.exe: Registry Size Estimator

Shows how much data is stored in the registry, or in any registry subtree, key, or subkey.

Efsinfo.exe: Encrypting File System Information

Displays information about encrypted files on NTFS partitions.

Elogdmp.exe: Event Log Dump

Dumps information from a selected event log.

Empty.exe

Frees the working set of a specified task or process.

Enumprop.exe: Enumerate Properties

Dumps all properties set on any directory services object.

Exctrlst.exe: Extensible Performance Counter List

Displays information on extensible performance counter DLLs installed on a computer.

Exetype.exe: Finding the Executable Type

Identifies the operating-system environment and processor required to run a particular executable file.

Expand.exe: File Expansion Utility

Expands compressed files.

Extract.exe: Extract Cabinet

Extracts files from cabinet (.cab) files.

Filespy.exe: File Spy

Allows users to monitor local and network drives to see what types of IRP and Fast I/O operation are running in the system.

Findgrp.exe: Find Group

Gets a user’s direct and indirect group memberships.

Floplock.exe: Lock Floppy Disk Drives

Locks a computer’s floppy disks so that only members of the Administrators and PowerUsers groups can access them.

Forfiles.exe

Enables batch processing of files in a directory or tree.

Freedisk.exe: Free Disk Space

Checks for free disk space, returning a 0 if there is enough space for an operation and a 1 if there isn’t.

Ftedit.exe: FT Registry Information Editor

Edits the registry for fault tolerance settings.

Getmac.exe: Get MAC Address

Gets a computer’s MAC (Ethernet) layer address and binding order.

Getsid.exe: Get Security ID

Compares the security IDs of two user accounts.

Gettype.exe: Get Type Version Information

Determines what kind of Windows operating system a computer is running and whether it is serving as a domain controller by querying the registry and setting ERRORLEVEL.

Global.exe: Global Groups

Lists contents of global groups across domains and workstations.

Gp.chm: Windows 2000 Group Policy Reference

Provides detailed descriptions of the group policies in Windows 2000, describing the effect of enabling, disabling, and not configuring each policy, as well as explanations of how related policies interact.

Gpolmig.exe: Group Policy Migration

Migrates settings from Windows NT policy files to the Windows 2000 group policy object structure.

Gpotool.exe: Group Policy Objects

Allows administrators to check Group Policy object integrity and monitor policy replication.

Gpresult.exe: Group Policy Results

Displays information about the result Group Policy has had on the current computer and logged-on user.

Grpcpy.exe: Group Copy

Copies the user names in an existing group to another group in the same or a different domain.

Guid2obj.exe: GUID to Object

Maps a globally unique identifier (GUID) to a distinguished name.

Hardware Compatibility List Web site

Lists Windows NT and Windows 2000-compatible hardware.

Heapmon.exe

Enables user to view system heap information.

Ie5ntwa.exe: Internet Explorer Web Accessories

Enhances Microsoft® Internet Explorer 5.

Ierk5.chm: Internet Explorer 5 Resource Kit

Online version of the Internet Explorer 5 Resource Kit.

Ifmember.exe

Checks whether a user is a member of a specified group.

Iisv5migrationutility_x86.exe: IIS Migration Wizard

Migrates third-party Web servers and settings to Internet Information Server in Windows 2000.

Installation Monitor

Tracks changes made by setup programs in the registry, .ini files, and other child processes.

Instsrv.exe: Service Installer

Installs and uninstalls executable services and assigns names to them.

Internet Explorer 5 Administration Kit

Enables administrators to create, distribute, and update customized installations of Internet Explorer.

Internet Scanner

Network security scanner that generates comprehensive report detailing security vulnerabilities.

Inuse.exe: File-In-Use Replace Utility

Performs on-the-fly replacement of files currently in use by the operating system.

Ipsecpol.exe: Internet Protocol Security Policies Tool

Configures IP Security policies in the Directory Service or in a local or remote registry.

Javareg.exe: Java/COM Registration Utility

Registers Java Classes, performing functions similar to Regsvr32.exe.

Kerbtray.exe

Displays ticket information for a given computer running the Kerberos protocol.

Kernprof.exe: Kernel Profiler

Provides counters for and profiles of various functions of the operating system kernel.

Kix32.exe: KiXtart 95

Processes logon scripts and provides an enhanced batch language.

Klist.exe

Views and deletes the Kerberos tickets granted to the current logon session.

Lbridge.cmd: L-Bridge

Command-line script that assists in migration from Windows NT 4.0 LMRepl to Windows 2000 File Replication Service.

Leakyapp.exe: Leaky Application

Appropriates system memory to test performance in low-memory situations.

Linkd.exe

Links an NTFS directory to a target object.

List.exe

Displays and searches a text file.

Local.exe: Local Groups

Lists contents of local groups across domains and workstations.

Logevent.exe: Event Logging Utility

Logs events to a local or remote computer.

Logoff.exe

Logs off a user.

Logtime.exe

Logs start or finish times of programs running in a batch file.

Mcast.exe

Sends multicast packets or listens for packets being sent to a multicast group address.

Mcopy.exe: Multiple Copy

Copies files and creates a log of the operation.

Mibcc.exe: SNMP MIB Compiler

Compiles Management Information Bases for Simple Network Management Protocol.

Moveuser.exe: Move Users

Changes the security of a profile from one user to another, allowing for either the account domain or the user name to change.

Mscep.dll: Certificate Enrollment Module for Routers

ISAPI filter for IIS that enables CEP Cisco Enrollment Protocol.

Msinfosetup.exe: Microsoft System Information Extensions

Extensions used to view System Information Files created as .nfo files or Windows Report Tool-created .cab files within the System Information MMC snap-in.

Mtc.exe: Multiple Tree Copy

Copies whole directory trees and their files.

Mtfcheck.exe: Microsoft Tape Format Verification Tool

Verifies that tape media are Microsoft Tape Format compliant.

Netclip.exe: Remote Clipboard Viewer

Shows contents of clipboards on local and remote computers and enables users to cut and paste data between them.

Netcons.exe: Net Connections

Displays current network connections.

Netsvc.exe: Command-line Service Controller

Remotely starts, stops, and queries the status of services over a network.

Nlmon.exe: NL Monitor

Lists and tests domains and trust relationships.

Now.exe

Echos the current date and time plus any arguments passed to it.

Ntdetect.com (Installd.com): Startup Hardware Detector

Installs a debug version of Startup Hardware Detector used for troubleshooting hardware detection issues.

Ntimer.exe

Measures how long a program runs.

Ntrights.exe

Grants or revokes Windows 2000 rights to or from users or groups.

Oh.exe: Open Handles

Shows the handles of open windows, processes or objects.

Oidgen.exe: OID Generator

Generates a pair of base Object Identifier values for use in extending the Acive Directory schema.

Oleview.exe: OLE/COM Object Viewer

Browses, configures, and tests Microsoft Component Object Model classes installed on a computer.

Os2api.txt: OS/2 API Information

Describes which APIs for the OS/2 operating system are supported by Windows 2000 and which are not.

Pathman.exe: Path Manager

Adds or removes components of the system or user path.

Perf2mib.exe: Performance Monitor MIB Builder Tool

Creates Management Information Bases based on Performance Monitor counters.

Perfmon4.exe: Performance Monitor 4

Provides detailed data about system resources used by specific components of the operating system and programs designed to collect performance data.

Perfmtr.exe: Performance Meter

Displays performance statistics in a text-based format.

Permcopy.exe: Permission Copy

Copies file- and share-level permissions from one share to another.

Perms.exe: File Access Permissions per User

Displays a user’s access permissions for a file or directory.

Pfmon.exe: Page Fault Monitor

Lists the source and number of page faults generated by an application’s function calls.

POSIX Utilities

Set of UNIX-like utilities recompiled to run on Windows NT and Windows 2000.

Prnadmin.dll: Printer Administration Objects

Manages printers, printer drivers, and printer ports on local and remote computers.

Pstat.exe: Process and Thread Status

Shows the status of all running processes and threads.

Ptree.exe: Process Tree

Allows you to query the process inheritance tree and quit processes on local or remote computers.

Pulist.exe

Lists processes running on local or remote computers.

Qgrep.exe

Performs string search routines on files, much like the POSIX tool Grep.exe.

Qslice.exe: CPU Usage by Processes

Shows the percentage of total CPU usage per process.

Qtcp.exe

Measures end-to-end network service quality.

Quickres.exe: Quick Resolution Changer

Changes display settings without restarting the computer.

Quiktray.exe: Quick Tray

Organizes the icons in the status area of the Windows 2000 desktop.

Raslist.exe: RAS List

Displays Remote Access Service server announces from a network.

Rasmon.exe: RAS Monitor

Dispays detailed information on Remote Access Service connections.

Rasusers.exe: Enumerating Remote Access Users

Lists Remote Access Service users on a domain or server.

Rdpclip.exe: File Copy

Copies files between Terminal Services server and client.

Reducer.exe: Reduce Trace Data

Processes one or more trace log files and produce a per-process, per-thread workload profile.

Regback.exe: Registry Backup

Backs up all or part of the Registry.

Regdmp.exe: Registry Dump

Dumps of all or part of the registry to standard output.

Regentry.chm: Technical Reference to the Windows 2000 Registry

Explains registry entries in detail.

Regfind.exe

Searches and optionally replaces registry data.

Regini.exe: Registry Change by Script

Modifies registry entries with a batch file.

Regrest.exe: Registry Restoration

Restores all or part of the registry.

Remapkey.exe: Remap Windows Keyboard Layout

Changes keyboard layout by remapping the scancode of keys.

Remote Administration Scripts

Visual Basic scripts for administering Active Directory through Active Directory Services Interface.

Remote Command Service (Rcmd.exe & Rcmdsvc.exe)

Provides secure client and server for remotely running command-line programs.

Remote Console

Enables a client to run a command-line session remotely on machines running the corresponding service.

Remote Process Kill

Enumerates and kills processes on a remote computer

Robocopy.exe: Robust File Copy Utility

Maintains multiple mirror images of large folder trees on network servers.

RPC Ping: RPC Connectivity Verification Tool

Checks whether Windows 2000 Server services are responding to remote procedure call requests from network clients.

Rpcdump.exe: RPC Dump

Dumps all the endpoints in the endpointmapper database, pings each endpoint, gathers some other information, sorts it, and outputs the data.

Rshsvc.exe: TCP/IP Remote Shell Service

Provides a command-line shell or single command execution service for remote users.

Rsm_dbic.exe: Removable Storage Integrity Checker

Checks the integrity of the RSM database for media and removable media drives and libraries.

Rsm_dbutil.exe: Removable Storage Database Utility

Steps through the RSM database and inspects each database object attribute for valid values and referential integrity.

Rsmconfg.exe: Removable Storage Manual Configuration Wizard

Aids in manually configuring libraries that RSM’s autoconfiguration can’t, from the command prompt.

RunExt: Run Extension

Adds a Run command to the Windows Explorer context menu.

Sc.exe: Service Controller Tool

Retrieves information about services from Service Controller.

Scanreg.exe: Registry Scan

Searches for a string in registry key names, value names, and value data.

Sclist.exe

Shows services and their status.

Setedit.exe: PerfMon Chart Setting Editor

Edits Performance Monitor chart settings files.

Setspn.exe: Manipulate Service Principal Names for Accounts

Manages the Service Principal Names directory property for an Active Directory account.

Setupmgr.exe: Setup Manager

Generates answer files for unattended installations or upgrades on multiple computers.

Setx.exe

Sets environmental variables in the the user or computer environment.

Showacls.exe: Show ACLs

Enumerates access rights for files, folders, and trees.

Showdisk.exe: Show Disk Space

Displays configuration and fault-tolerance information for primary partitions and logical drives.

Showgrps.exe: Show Groups

Shows the groups to which a user belong.

Showmbrs.exe: Show Members

Shows the user names of members of a group.

Showperf.exe: Performance Data Block Dump Utility

Dumps the contents of the Performance Data block so you can view and debug the raw data structure.

Showpriv.exe: Show Privilege

Displays the users and groups granted a particular privilege on the local computer.

Shutdown.exe: Remote Shutdown

Shuts down or reboots a local or remote computer.

Sipanel.exe: Soft Input Panel

Allows computers to use a pen device for input.

Sleep.exe: Batch File Wait

Causes a computer to wait for a specified amount of time.

Smart Sketch LE

Technical drawing and diagramming application.

Snmpmon.exe: SNMP Monitor

Monitors Simple Network Management Protocol variables for multiple nodes and logs them to a database.

Snmputil.exe: SNMP Browser

Queries a Simple Network Management Protocol host or community for Management Information Base values from command prompt.

Soon.exe: Near-Future Command Scheduler

Schedules commands to run within the next 24 hours.

Srvany.exe: Applications As Services Utility

Enables applications to run as services.

Srvcheck.exe: Server Share Check

Lists shares on a computer and enumerates the access-control lists for each one.

Srvinfo.exe: Server Information

Displays network, disk drive, and service information about a local or remote server.

Srvinstw.exe: Service Installation Wizard

Installs and deletes services and device drivers on a local or remote computer.

Srvmgr.exe: Server Manager

Manages Windows NT 4.0 or Windows NT 3.51 domains and computers.

Su.exe

Enables a user to run a process in the security context of a different user.

Subinacl.exe

Migrates security information between users, groups and domains.

Support Online Web site

Helps users find troubleshooting information, downloads, and technical support on the Web.

Svcacls.exe: Service ACL Editor

Sets access-control lists on service objects.

Svcmon.exe: Service Monitoring Tool

Monitors services on local or remote computers and notifies the administrator when their status changes.

Sysdiff.exe: Automated Installation Tool

Pre-installs applications as part of an automated setup.

Sysprep.exe: System Preparation Utility

Automates the cloning of a customized configuration of Windows 2000 to multiple computers.

Sysscansetup.exe: System Scanner

Scans sytems and generates comprehensive report detailing security vulnerabilities.

Takeown.exe

Cleans up multiple boot drives without formatting the drive.

Terminal Server Capacity Planning Tools

Suite of tools that assist organizations with Windows 2000 Terminal Services capacity planning.

Textview.exe: Text Viewer

Displays contents of multiple text files on local or shared drives.

Timeout.exe

Pauses execution of a command for a specified period.

Timestmp.sys: QoS Time Stamp

Provides kernel mode time-stamping support for Qtcp.exe.

Timethis.exe

Times how long it takes to run a given command.

Timezone.exe: Daylight Saving Time Update Utility

Updates daylight saving time information in the registry for a time zone.

Tlocmgr.exe: Telephony Location Manager

Configures telephony locations and properties for portable computers.

Top.exe: Time-Ordered Processes

Lists processes that are using the most processor time.

Totlproc.exe: Total Processors

Counter that measures the memory usage of all installed processors.

Tracedmp.exe: Trace Dump

Processes a trace log file or real time trace buffers and converts them to a .csv file.

Traceenable.exe

Enables tracing and displays current tracing options.

Tracelog.exe

Starts, stops or enables trace logging.

Typeperf.exe: Performance Data in the Command Window

Displays real-time data from Performance Monitor counters in a command window.

Tzedit.exe: Time Zone Editor

Creates and edits time-zone entries for the Date/Time option in Control Panel.

Unattend.doc: Unattended Setup Parameters Guide

Provides detailed information on how to automate Windows 2000 installation through the use of answer files.

Uptime.exe

Displays system uptime, events and statistics.

Usrmgr.exe: User Manager for Domains

Manages security for Windows NT 4.0 domains, member servers, and Windows 2000 Professional computers.

Usrstat.exe: User Statistics

Lists user names, full names, and last logon date and time for all user accounts in a domain.

Usrtogrp.exe: Add Users to a Group

Adds users to a group from a text file.

Vadump.exe: Virtual Address Dump

Shows the state and size of each segment of virtual address space.

Vfi.exe: Visual File Information

Retrieves and generates detailed information on files, such as attibutes, version, and flags.

W2000events.mdb: Windows 2000 Events

Lists Event Log messages and related information.

W2000msgs.chm: Windows 2000 Error and Event Messages Help

Provides explanations of Windows 2000 error messages.

Waitfor.exe

Synchronizes a task across multiple computers.

Wdsbm.exe: Who Is Designated Subnet Bandwidth Manager?

Identifies the ACS SBM that manages the segment to which a specific host is attached.

Where.exe

Locates files on a hard disk or network.

Whoami.exe

Returns the domain or computer name and user name of the user who is currently logged on.

Windows NT 4.0 OEM Support Tools

Set of Kernel extensions and related debugging tools for Windows NT 4.0

Winexit.scr: Windows Exit Screen Saver

Logs off the current user after a specified time has elapsed.

Winrpsdk15.doc: Windows Report Tool Deployment Software Development Kit

Documents Windows Report Tool, which provides a means for uploading system information and a request for assistance over the Internet or an intranet to a helpdesk or support center.

Winschk.exe

Checks inconsistencies in Windows Internet Name Service databases and verifies replication activity.

Winscl.exe: WINS Administration Tool

Manages Windows Internet Name Service activities and databases.

Wperf.exe: Perf Monitor

Monitors performance and presents data a little differently than Performance Monitor.

Xcacls.exe

Displays and modifies security options for system folders.