Windows 2003 Support Tools
Techs( younjin.jeong@gmail.com , 정윤진 )
주말간 데이터센터에 박혀서 DB클러스터를 손봤다.
사실 그렇게 큰 문제는 아니었는데, 윈도우 기반 상용 클러스터인 Veritas Cluster Software 가 Active Directory 를 사용하기 때문에 발생했던, 흔히 있을 수 있는 AD 인증 관련 이슈.
유닉스 기반 클러스터에서는 보기 힘든, ( 뭐 인증 처리는 어디서나 해야 하니 비슷하다고 할 수 있을 지도 )
PDC와 기타 클러스터 멤버 노드들 간의 AD 복제 확인, 구성 확인 이런것들을 하면서 보니, 윈도우에서는 특별히 학원 같은 교육기관을 수료하지 않거나 또는 구글링을 미친듯이 하지 않으면 나오지 않는, 하지만 알고 보면 윈도 서버 설치 디스크와 함께 따라오는 Support Tools 에 대해 잘 모르는 경우가 많은 듯.
웬지 /sbin 에 기본적으로 들어 있거나, 접하기 쉬운 영역에 반드시 위치 하고 있어야 할 것 같은 툴들이 별도로 설치하지 않으면 없다는 사실은, 이 윈도우 시스템에 발딛게 어렵게 하는 일부 요인 중의 하나가 아닌가 생각 해 본다.
Windows Support Tools 에 대해 간단히 정의를 하자면, "Andrew Z. Tabona" 씨는
"Administrator 의 간단한 매니징을 돕는데 촛점을 맞춘 컬렉션" 이라고 하고 있다.
컬렉션에 들어있는 툴의 리스트는 다음과 같다. 2008 에서는 조금 변경이 있거나 시스템에 포함 되어 있을지도. (설마!?)
편의상 리스트는 아래의 링크에서 퍼온다.
http://www.windowsnetworking.com/articles_tutorials/Windows_2003_Support_Tools.html
아래의 내용은, 유닉스에서 그랬던 것 처럼 설치 후 한번씩 실행 해 보면 그 사용방법이나 사용 대상을 쉽게 알아 낼 수 있을 듯.
음... 서비스 시스템의 C:\에 C:\SBIN\ 하나 만들고 PATH 추가를.. ;;;;
해당 제품의 설치 ( Windows 2003 에만 해당 ) 는 Windows Server Disc 2 를 사용하거나, 다음의 링크에서 받을 수 있다. (32비트용, 64비트는 구글링 합시다. )
http://www.microsoft.com/downloads/details.aspx?FamilyId=6EC50B78-8BE1-4E81-B3BE-4E7AC4F0912D&displaylang=en
어찌보면 당연하게 알고 있어야 할 위와같은 툴을 이제라도 알았으니 앞으로 보다 편한 서버질이 가능 할 듯.
단, 장애 상황에서 사용하기엔 일부 시간이 오래 걸리는 커맨드, 커맨드 조합 등이 있으니 사전에 미리 사용해 보고 실전에서 사용하기를 당부. ( 책임 회피 )
다소 편안한 Ctrl + C , V 를 할 수 있게 도움을 주신 저멀리 해외의 Andrew Z. Tabona 씨에게 감사의 의미로 링크를.
http://www.windowsnetworking.com/Andrew_Tabona/
( younjin.jeong@gmail.com , 정윤진 )
주말간 데이터센터에 박혀서 DB클러스터를 손봤다.
사실 그렇게 큰 문제는 아니었는데, 윈도우 기반 상용 클러스터인 Veritas Cluster Software 가 Active Directory 를 사용하기 때문에 발생했던, 흔히 있을 수 있는 AD 인증 관련 이슈.
유닉스 기반 클러스터에서는 보기 힘든, ( 뭐 인증 처리는 어디서나 해야 하니 비슷하다고 할 수 있을 지도 )
PDC와 기타 클러스터 멤버 노드들 간의 AD 복제 확인, 구성 확인 이런것들을 하면서 보니, 윈도우에서는 특별히 학원 같은 교육기관을 수료하지 않거나 또는 구글링을 미친듯이 하지 않으면 나오지 않는, 하지만 알고 보면 윈도 서버 설치 디스크와 함께 따라오는 Support Tools 에 대해 잘 모르는 경우가 많은 듯.
웬지 /sbin 에 기본적으로 들어 있거나, 접하기 쉬운 영역에 반드시 위치 하고 있어야 할 것 같은 툴들이 별도로 설치하지 않으면 없다는 사실은, 이 윈도우 시스템에 발딛게 어렵게 하는 일부 요인 중의 하나가 아닌가 생각 해 본다.
Windows Support Tools 에 대해 간단히 정의를 하자면, "Andrew Z. Tabona" 씨는
"Administrator 의 간단한 매니징을 돕는데 촛점을 맞춘 컬렉션" 이라고 하고 있다.
컬렉션에 들어있는 툴의 리스트는 다음과 같다. 2008 에서는 조금 변경이 있거나 시스템에 포함 되어 있을지도. (설마!?)
편의상 리스트는 아래의 링크에서 퍼온다.
http://www.windowsnetworking.com/articles_tutorials/Windows_2003_Support_Tools.html
아래의 내용은, 유닉스에서 그랬던 것 처럼 설치 후 한번씩 실행 해 보면 그 사용방법이나 사용 대상을 쉽게 알아 낼 수 있을 듯.
음... 서비스 시스템의 C:\에 C:\SBIN\ 하나 만들고 PATH 추가를.. ;;;;
The support tools explained
This section will display the list of support tools found on the Windows Server 2003 CD-ROM in alphabetical order.
To use the command line format tools, open the command prompt and type the filename followed by the appropriate parameters. If you are unaware of the parameters of the tool you wish to use then type: filename /? to show the list of available parameters.
| Tool Name: | ACL Diagnostics |
| Filename: | acldiag.exe |
| Format: | Command Line |
| Description: | Detects and displays the permission problems found in the Access Control Lists of objects in Active Directory |
| Tool Name: | Active Directory Replication Monitor |
| Filename: | replmon.exe |
| Format: | Graphical User Interface |
| Description: | Allows the control of Active Directory replication information |
| Tool Name: | Active Directory Search Tool |
| Filename: | search.vbs |
| Format: | Command Line |
| Description: | A script used to search an LDAP (Lightweight Directory Access Protocol) directory |
| Tool Name: | Application Deployment Diagnostics |
| Filename: | addiag.exe |
| Format: | Command Line |
| Description: | Gives you a list of the software implemented on a local computer using group policy |
| Tool Name: | ADSI Edit |
| Filename: | adsiedit.msc |
| Format: | Graphical User Interface |
| Description: | Allows the editing of objects in Active Directory in a low-level style editor |
| Tool Name: | Advanced Power Management Status |
| Filename: | apmstat.exe |
| Format: | Command Line |
| Description: | Gives information about advanced power management features in older notebook computers |
| Tool Name: | Binary File Difference Finder |
| Filename: | bindiff.exe |
| Format: | Command Line |
| Description: | Allows you to compare two binary files and view their differences |
| Tool Name: | BITS Administration Utility |
| Filename: | bitsadmin.exe |
| Format: | Command Line |
| Description: | Adminsters the Background Intelligent Transfer Service which controls background file transfers for Internet Information Services |
| Tool Name: | Browser Status |
| Filename: | browstat.exe |
| Format: | Command Line |
| Description: | Displays network browser status |
| Tool Name: | Cabinet Tool |
| Filename: | cabarc.exe |
| Format: | Command Line |
| Description: | Creates, views and extracts compressed .CAB files |
| Tool Name: | Clone Principal |
| Filename: | clonepr.dll |
| Format: | Command Line |
| Description: | This dynamic link library clones windows NT 4.0 users and groups to allow migration to a Windows Server 2003 forest |
| Tool Name: | Dependancy Walker |
| Filename: | depends.exe |
| Format: | Graphical User Interface |
| Description: | Allows you to view all the dependencies of a file. You are able to check which DLLs are dependant on others. This can be very useful when investigating a problem related to a missing file. The image below shows the GUI interface of the dependancy viewer. To demonstrate, I have loaded the twain_32.dll file - as you can see, this dll depends on three other dlls for it to work. |
| Tool Name: | Device Console Utility |
| Filename: | devcon.exe |
| Format: | Command Line |
| Description: | The command prompt version of the device manager in the hardware tab of system properties |
| Tool Name: | DFS and SYSVOL Replication Topology Analysis Tool |
| Filename: | topchk.cmd |
| Format: | Command Line |
| Description: | Shows the FRS replication topology |
| Tool Name: | DHCP Server Locator Utility |
| Filename: | dhcploc.exe |
| Format: | Command Line |
| Description: | Shows a list of all DHCP servers on the subnet |
| Tool Name: | Directory Disk Usage |
| Filename: | diruse.exe |
| Format: | Command Line |
| Description: | Displays directory sizes and compression information |
| Tool Name: | Directory Services ACL Editor |
| Filename: | dcaslc.exe |
| Format: | Command Line |
| Description: | Manages access control lists for Active Directory objects |
| Tool Name: | Directory Services Utility |
| Filename: | dsastat.exe |
| Format: | Command Line |
| Description: | Compare and contrast two directory trees in the same domain or across different domains |
| Tool Name: | Distributed File System (DFS) Utility |
| Filename: | dfsutil.exe |
| Format: | Command Line |
| Description: | Manages DFS, limits clients to targets within the same site and enables windows server 2003 based DFS servers to select remote targets |
| Tool Name: | Diskprobe |
| Filename: | dskprobe.exe |
| Format: | Graphical User Interface |
| Description: | Allows you to edit the disk sector information directly (includes also the MBR) |
| Tool Name: | Disk Manager Diagnostics |
| Filename: | dmdiag.exe |
| Format: | Command Line |
| Description: | Provides detailed diagnostic information about hard disk drives |
| Tool Name: | DNS Server Troubleshooting Tool |
| Filename: | dnscmd.exe |
| Format: | Command Line |
| Description: | Administrators are able to view and modify DNS servers, zones and resources |
| Tool Name: | Domain Controller Diagnostic Tool |
| Filename: | dcdiag.exe |
| Format: | Command Line |
| Description: | Analyzes and reports on the state of a domain controller |
| Tool Name: | Encrypting File System Information |
| Filename: | efsinfo.exe |
| Format: | Command Line |
| Description: | Provides information about files that have been encrypted using EFS. This is a very helpful tool when you want to analyze which files and folders are encrypted. If I were to go to the C: drive in the command prompt and type "efsinfo", a list of all the files and their encryption related information will be displayed. This can be seen in the example below: |
| Tool Name: | Extensible Perforamce Counter List |
| Filename: | Exctrlst.exe |
| Format: | Graphical User Interface |
| Description: | Displays information about the programs that use the regsitry to provide performance counters |
| Tool Name: | Fault Tolerance Disk Mounter |
| Filename: | ftonline.exe |
| Format: | Command Line |
| Description: | Mounts Windows NT 4.0 fault tolerance disk sets |
| Tool Name: | File and Directory Comparison |
| Filename: | windiff.exe |
| Format: | Command Line, Graphical User Interface |
| Description: | Compares ASCII text files or folders |
| Tool Name: | File Replication Utility |
| Filename: | ntfrsutil.exe |
| Format: | Command Line |
| Description: | Displays the status of the NT file replication service onto the screen of dumps it in a file |
| Tool Name: | FileVer |
| Filename: | filever.exe |
| Format: | Command Line |
| Description: | States version information of a file or folder |
| Tool Name: | FRS Connection Status Report |
| Filename: | connstat.cmd |
| Format: | Command Line |
| Description: |
| Tool Name: | FRS Health Check |
| Filename: | health_chk.cmd |
| Format: | Command Line |
| Description: | States the health of the FRS of a specified domain controller |
| Tool Name: | FRS Inbound and Outbound Logs Report Tool |
| Filename: | lologsum.cmd |
| Format: | Command Line |
| Description: | Displays information about FRS replication |
| Tool Name: | Get Security ID |
| Filename: | getsid.exe |
| Format: | Command Line |
| Description: | Checks if a user account database is corrupt by comparing the SIDs of the account on two domain controllers |
| Tool Name: | Global Flags Editor |
| Filename: | gflags.exe |
| Format: | Graphical User Interface |
| Description: | Allows you to edit global registry settings or flags that are in use by the kernel |
| Tool Name: | HTTP Configuration Utility |
| Filename: | httpcfg.exe |
| Format: | Command Line |
| Description: | Manages the HTTP Application Programming Interface |
| Tool Name: | IAS Parse Tool |
| Filename: | iasparse.exe |
| Format: | Command Line |
| Description: | Parses RAS and IAS log files and displays the results in IAS or ODBC format |
| Tool Name: | Kerberos Keytab Setup |
| Filename: | ktpass.exe |
| Format: | Command Line |
| Description: | Configures a non-windows 2003 kerberos service to be a security principle in Windows Server 2003 |
| Tool Name: | Kerberos Setup |
| Filename: | ksetup.exe |
| Format: | Command Line |
| Description: | Configures Windows Server 2003 clients to use an MIT Kerberos Server |
| Tool Name: | LDP Tool |
| Filename: | ldp.exe |
| Format: | Graphical User Interface |
| Description: | Performs Lightweight Directory Access Protocol operations |
| Tool Name: | Manipulate Service Principle Names for Accounts |
| Filename: | setspn.exe |
| Format: | Command Line |
| Description: | Manipulates SPNs for active directory service accounts |
| Tool Name: | Memory Pool Monitor |
| Filename: | poolmon.exe |
| Format: | Command Line |
| Description: | Shows information about the system's memory pool. |
| Tool Name: | Memory Profiling Tool |
| Filename: | memsnap.exe |
| Format: | Command Line |
| Description: | Allows you to save a list of the memory resources being used by all processes |
| Tool Name: | Move Users |
| Filename: | movetree.exe |
| Format: | Command Line |
| Description: | Moves objects between domains |
| Tool Name: | Network Connectivity Tester |
| Filename: | netdiag.exe |
| Format: | Command Line |
| Description: | Troubleshoots network connectivity by running various tests on your configuration and displaying the results. This tool does not require any extra parameters, which allows the administrator to instruct a user to run this command, pass on the results and allow them to be analyzed. Thus, making it less complicated if say, a senior admin was at home instructing the junior admin to do this on the servers at the office. The image below only displays the first phase of the results. |
| Tool Name: | Network Monitor Capture Utility |
| Filename: | netcap.exe |
| Format: | Command Line |
| Description: | Acts as a packet sniffer by using Network Monitor to capture packets and log them to a file |
| Tool Name: | NItest |
| Filename: | nitest.exe |
| Format: | Command Line |
| Description: | Queries the status of trusts; lists primary domain controllers; forces a shutdown and forces a user database in syncronization |
| Tool Name: | Poolmon |
| Filename: | poolmon.exe |
| Format: | Command Line |
| Description: | Helps to detect memory leaks by displaying detailed information about the allocation of memory. As soon as you type "poolmon" from the command prompt, the following kind of data will be shown. This includes the total amount of memory in the system and the memory available, amongst others. |
| Tool Name: | Port Query |
| Filename: | portqry.exe |
| Format: | Command Line |
| Description: | Allows you to troubleshoot TCP and UDP ports. This helps the administrator to determine the state of any given port. If you type "portqryt -n computer_name -e port_number" the name will be resolved to the ip address and the port number will be queried. Details such as the service assigned to that port, the port type (TCP, UDP), the state of the port and also any held data will be displayed. |
| Tool Name: | Process Viewer |
| Filename: | pviewer.exe |
| Format: | Graphical User Interface |
| Description: | Allows you to change a process priority or kill a process. This can be described as more advanced version of the "process viewer" available in the task manager. With this tool you are able to set the priority of the thread and process or kill a process altogether. Pressing on the memory detail button will bring up a window displaying in-depth information as to where the memory of the process is going. |
| Tool Name: | Remote Command Line |
| Filename: | remote.exe |
| Format: | Command Line |
| Description: | Runs command line programs on remote computers using only named pipes |
| Tool Name: | Remote Storage Diagnostics Utility |
| Filename: | rsdiag.exe |
| Format: | Command Line |
| Description: | Queries and reports on remote storage databases |
| Tool Name: | Remote Storage File Analysis Utility |
| Filename: | rsdir.exe |
| Format: | Command Line |
| Description: | Displays information form files in remote storage |
| Tool Name: | Replication Diagnostics Tool |
| Filename: | repadmin.exe |
| Format: | Command Line |
| Description: | Allows the doagnosis of replication problems between controllers in Windows Server 2003 |
| Tool Name: | Security Administration Tools |
| Filename: | sidwalk.exe, showaccs.exe, sidwalk.msc |
| Format: | Command Line, Command Line, Graphical User Interface |
| Description: | Manages access control lists |
| Tool Name: | Security Descriptor Check Utility |
| Filename: | sdcheck.exe |
| Format: | Command Line |
| Description: | Displays access controls on an object |
| Tool Name: | Service Pack Check |
| Filename: | spcheck.exe |
| Format: | Command Line |
| Description: | Creates a file containing a list of the service pack versions of important system files. This tool requires you to have the spcheck.ini file in the directory in which you are going to execute the command. If you do not have this file available, then you may download it from the Microsoft website. Type "spcheck" and a report will be created and dumped into the current directory. You will then have to go to the file and open it will a text editor (notepad.exe will do fine). The report contains a list of important system files and which service pack they have installed or if they are missing. |
| Tool Name: | Windows Domain Manager |
| Filename: | netdom.exe |
| Format: | Command Line |
| Description: | Provides command line administration of domains and trusts |
| Tool Name: | Windows Installer Cleanup Utility |
| Filename: | msicuu.exe |
| Format: | Graphical User Interface |
| Description: | Removes excess registry entries from a faulty installation |
| Tool Name: | Windows Installer Zapper |
| Filename: | msizap.exe |
| Format: | Command Line |
| Description: | The same as the widows installer cleanup utility, only a more in depth version |
| Tool Name: | Xcacls.exe |
| Filename: | xcacls.exe |
| Format: | Command Line |
| Description: | Sets and displays files ACLs |
해당 제품의 설치 ( Windows 2003 에만 해당 ) 는 Windows Server Disc 2 를 사용하거나, 다음의 링크에서 받을 수 있다. (32비트용, 64비트는 구글링 합시다. )
http://www.microsoft.com/downloads/details.aspx?FamilyId=6EC50B78-8BE1-4E81-B3BE-4E7AC4F0912D&displaylang=en
어찌보면 당연하게 알고 있어야 할 위와같은 툴을 이제라도 알았으니 앞으로 보다 편한 서버질이 가능 할 듯.
단, 장애 상황에서 사용하기엔 일부 시간이 오래 걸리는 커맨드, 커맨드 조합 등이 있으니 사전에 미리 사용해 보고 실전에서 사용하기를 당부. ( 책임 회피 )
다소 편안한 Ctrl + C , V 를 할 수 있게 도움을 주신 저멀리 해외의 Andrew Z. Tabona 씨에게 감사의 의미로 링크를.
http://www.windowsnetworking.com/Andrew_Tabona/
( younjin.jeong@gmail.com , 정윤진 )