System Compleat.

Windows 2003 Support Tools

Techs
( younjin.jeong@gmail.com , 정윤진 )


주말간 데이터센터에 박혀서 DB클러스터를 손봤다.
사실 그렇게 큰 문제는 아니었는데, 윈도우 기반 상용 클러스터인 Veritas Cluster Software 가 Active Directory 를 사용하기 때문에 발생했던,  흔히 있을 수 있는 AD 인증 관련 이슈. 

유닉스 기반 클러스터에서는 보기 힘든, ( 뭐 인증 처리는 어디서나 해야 하니 비슷하다고 할 수 있을 지도 )


PDC와 기타 클러스터 멤버 노드들 간의 AD 복제 확인, 구성 확인 이런것들을 하면서 보니, 윈도우에서는 특별히 학원 같은 교육기관을 수료하지 않거나 또는 구글링을 미친듯이 하지 않으면 나오지 않는, 하지만 알고 보면 윈도 서버 설치 디스크와 함께 따라오는 Support Tools 에 대해 잘 모르는 경우가 많은 듯.

웬지 /sbin 에 기본적으로 들어 있거나, 접하기 쉬운 영역에 반드시 위치 하고 있어야 할 것 같은 툴들이 별도로 설치하지 않으면 없다는 사실은, 이 윈도우 시스템에 발딛게 어렵게 하는 일부 요인 중의 하나가 아닌가 생각 해 본다.


Windows Support Tools 에 대해 간단히 정의를 하자면,  "Andrew Z. Tabona" 씨는
"Administrator 의 간단한 매니징을 돕는데 촛점을 맞춘 컬렉션"  이라고 하고 있다.

컬렉션에 들어있는 툴의 리스트는 다음과 같다.  2008 에서는 조금 변경이 있거나 시스템에 포함 되어 있을지도. (설마!?)

편의상 리스트는 아래의 링크에서 퍼온다.
http://www.windowsnetworking.com/articles_tutorials/Windows_2003_Support_Tools.html

아래의 내용은, 유닉스에서 그랬던 것 처럼 설치 후 한번씩 실행 해 보면 그 사용방법이나 사용 대상을 쉽게 알아 낼 수 있을 듯.

음... 서비스 시스템의 C:\에  C:\SBIN\ 하나 만들고 PATH 추가를.. ;;;; 


The support tools explained

This section will display the list of support tools found on the Windows Server 2003 CD-ROM in alphabetical order.

To use the command line format tools, open the command prompt and type the filename followed by the appropriate parameters. If you are unaware of the parameters of the tool you wish to use then type: filename /? to show the list of available parameters.

Tool Name: ACL Diagnostics
Filename: acldiag.exe
Format: Command Line
Description: Detects and displays the permission problems found in the Access Control Lists of objects in Active Directory


Tool Name: Active Directory Replication Monitor
Filename: replmon.exe
Format: Graphical User Interface
Description: Allows the control of Active Directory replication information


Tool Name: Active Directory Search Tool
Filename: search.vbs
Format: Command Line
Description: A script used to search an LDAP (Lightweight Directory Access Protocol) directory


Tool Name: Application Deployment Diagnostics
Filename: addiag.exe
Format: Command Line
Description: Gives you a list of the software implemented on a local computer using group policy


Tool Name: ADSI Edit
Filename: adsiedit.msc
Format: Graphical User Interface
Description: Allows the editing of objects in Active Directory in a low-level style editor


Tool Name: Advanced Power Management Status
Filename: apmstat.exe
Format: Command Line
Description: Gives information about advanced power management features in older notebook computers


Tool Name: Binary File Difference Finder
Filename: bindiff.exe
Format: Command Line
Description: Allows you to compare two binary files and view their differences


Tool Name: BITS Administration Utility
Filename: bitsadmin.exe
Format: Command Line
Description: Adminsters the Background Intelligent Transfer Service which controls background file transfers for Internet Information Services


Tool Name: Browser Status
Filename: browstat.exe
Format: Command Line
Description: Displays network browser status


Tool Name: Cabinet Tool
Filename: cabarc.exe
Format: Command Line
Description: Creates, views and extracts compressed .CAB files


Tool Name: Clone Principal
Filename: clonepr.dll
Format: Command Line
Description: This dynamic link library clones windows NT 4.0 users and groups to allow migration to a Windows Server 2003 forest


Tool Name: Dependancy Walker
Filename: depends.exe
Format: Graphical User Interface
Description: Allows you to view all the dependencies of a file. You are able to check which DLLs are dependant on others. This can be very useful when investigating a problem related to a missing file. The image below shows the GUI interface of the dependancy viewer. To demonstrate, I have loaded the twain_32.dll file - as you can see, this dll depends on three other dlls for it to work.

Tool Name: Device Console Utility
Filename: devcon.exe
Format: Command Line
Description: The command prompt version of the device manager in the hardware tab of system properties

Tool Name: DFS and SYSVOL Replication Topology Analysis Tool
Filename: topchk.cmd
Format: Command Line
Description: Shows the FRS replication topology

Tool Name: DHCP Server Locator Utility
Filename: dhcploc.exe
Format: Command Line
Description: Shows a list of all DHCP servers on the subnet

Tool Name: Directory Disk Usage
Filename: diruse.exe
Format: Command Line
Description: Displays directory sizes and compression information

Tool Name: Directory Services ACL Editor
Filename: dcaslc.exe
Format: Command Line
Description: Manages access control lists for Active Directory objects

Tool Name: Directory Services Utility
Filename: dsastat.exe
Format: Command Line
Description: Compare and contrast two directory trees in the same domain or across different domains

Tool Name: Distributed File System (DFS) Utility
Filename: dfsutil.exe
Format: Command Line
Description: Manages DFS, limits clients to targets within the same site and enables windows server 2003 based DFS servers to select remote targets

Tool Name: Diskprobe
Filename: dskprobe.exe
Format: Graphical User Interface
Description: Allows you to edit the disk sector information directly (includes also the MBR)

Tool Name: Disk Manager Diagnostics
Filename: dmdiag.exe
Format: Command Line
Description: Provides detailed diagnostic information about hard disk drives

Tool Name: DNS Server Troubleshooting Tool
Filename: dnscmd.exe
Format: Command Line
Description: Administrators are able to view and modify DNS servers, zones and resources

Tool Name: Domain Controller Diagnostic Tool
Filename: dcdiag.exe
Format: Command Line
Description: Analyzes and reports on the state of a domain controller

Tool Name: Encrypting File System Information
Filename: efsinfo.exe
Format: Command Line
Description: Provides information about files that have been encrypted using EFS. This is a very helpful tool when you want to analyze which files and folders are encrypted. If I were to go to the C: drive in the command prompt and type "efsinfo", a list of all the files and their encryption related information will be displayed. This can be seen in the example below:

Tool Name: Extensible Perforamce Counter List
Filename: Exctrlst.exe
Format: Graphical User Interface
Description: Displays information about the programs that use the regsitry to provide performance counters

Tool Name: Fault Tolerance Disk Mounter
Filename: ftonline.exe
Format: Command Line
Description: Mounts Windows NT 4.0 fault tolerance disk sets

Tool Name: File and Directory Comparison
Filename: windiff.exe
Format: Command Line, Graphical User Interface
Description: Compares ASCII text files or folders

Tool Name: File Replication Utility
Filename: ntfrsutil.exe
Format: Command Line
Description: Displays the status of the NT file replication service onto the screen of dumps it in a file

Tool Name: FileVer
Filename: filever.exe
Format: Command Line
Description: States version information of a file or folder

Tool Name: FRS Connection Status Report
Filename: connstat.cmd
Format: Command Line
Description:

Tool Name: FRS Health Check
Filename: health_chk.cmd
Format: Command Line
Description: States the health of the FRS of a specified domain controller

Tool Name: FRS Inbound and Outbound Logs Report Tool
Filename: lologsum.cmd
Format: Command Line
Description: Displays information about FRS replication

Tool Name: Get Security ID
Filename: getsid.exe
Format: Command Line
Description: Checks if a user account database is corrupt by comparing the SIDs of the account on two domain controllers

Tool Name: Global Flags Editor
Filename: gflags.exe
Format: Graphical User Interface
Description: Allows you to edit global registry settings or flags that are in use by the kernel

Tool Name: HTTP Configuration Utility
Filename: httpcfg.exe
Format: Command Line
Description: Manages the HTTP Application Programming Interface

Tool Name: IAS Parse Tool
Filename: iasparse.exe
Format: Command Line
Description: Parses RAS and IAS log files and displays the results in IAS or ODBC format

Tool Name: Kerberos Keytab Setup
Filename: ktpass.exe
Format: Command Line
Description: Configures a non-windows 2003 kerberos service to be a security principle in Windows Server 2003

Tool Name: Kerberos Setup
Filename: ksetup.exe
Format: Command Line
Description: Configures Windows Server 2003 clients to use an MIT Kerberos Server

Tool Name: LDP Tool
Filename: ldp.exe
Format: Graphical User Interface
Description: Performs Lightweight Directory Access Protocol operations

Tool Name: Manipulate Service Principle Names for Accounts
Filename: setspn.exe
Format: Command Line
Description: Manipulates SPNs for active directory service accounts

Tool Name: Memory Pool Monitor
Filename: poolmon.exe
Format: Command Line
Description: Shows information about the system's memory pool.

Tool Name: Memory Profiling Tool
Filename: memsnap.exe
Format: Command Line
Description: Allows you to save a list of the memory resources being used by all processes

Tool Name: Move Users
Filename: movetree.exe
Format: Command Line
Description: Moves objects between domains

Tool Name: Network Connectivity Tester
Filename: netdiag.exe
Format: Command Line
Description: Troubleshoots network connectivity by running various tests on your configuration and displaying the results. This tool does not require any extra parameters, which allows the administrator to instruct a user to run this command, pass on the results and allow them to be analyzed. Thus, making it less complicated if say, a senior admin was at home instructing the junior admin to do this on the servers at the office. The image below only displays the first phase of the results.

Tool Name: Network Monitor Capture Utility
Filename: netcap.exe
Format: Command Line
Description: Acts as a packet sniffer by using Network Monitor to capture packets and log them to a file

Tool Name: NItest
Filename: nitest.exe
Format: Command Line
Description: Queries the status of trusts; lists primary domain controllers; forces a shutdown and forces a user database in syncronization

Tool Name: Poolmon
Filename: poolmon.exe
Format: Command Line
Description: Helps to detect memory leaks by displaying detailed information about the allocation of memory. As soon as you type "poolmon" from the command prompt, the following kind of data will be shown. This includes the total amount of memory in the system and the memory available, amongst others.

Tool Name: Port Query
Filename: portqry.exe
Format: Command Line
Description: Allows you to troubleshoot TCP and UDP ports. This helps the administrator to determine the state of any given port. If you type "portqryt -n computer_name -e port_number" the name will be resolved to the ip address and the port number will be queried. Details such as the service assigned to that port, the port type (TCP, UDP), the state of the port and also any held data will be displayed.

Tool Name: Process Viewer
Filename: pviewer.exe
Format: Graphical User Interface
Description: Allows you to change a process priority or kill a process. This can be described as more advanced version of the "process viewer" available in the task manager. With this tool you are able to set the priority of the thread and process or kill a process altogether. Pressing on the memory detail button will bring up a window displaying in-depth information as to where the memory of the process is going.

Tool Name: Remote Command Line
Filename: remote.exe
Format: Command Line
Description: Runs command line programs on remote computers using only named pipes

Tool Name: Remote Storage Diagnostics Utility
Filename: rsdiag.exe
Format: Command Line
Description: Queries and reports on remote storage databases

Tool Name: Remote Storage File Analysis Utility
Filename: rsdir.exe
Format: Command Line
Description: Displays information form files in remote storage

Tool Name: Replication Diagnostics Tool
Filename: repadmin.exe
Format: Command Line
Description: Allows the doagnosis of replication problems between controllers in Windows Server 2003

Tool Name: Security Administration Tools
Filename: sidwalk.exe, showaccs.exe, sidwalk.msc
Format: Command Line, Command Line, Graphical User Interface
Description: Manages access control lists

Tool Name: Security Descriptor Check Utility
Filename: sdcheck.exe
Format: Command Line
Description: Displays access controls on an object

Tool Name: Service Pack Check
Filename: spcheck.exe
Format: Command Line
Description: Creates a file containing a list of the service pack versions of important system files. This tool requires you to have the spcheck.ini file in the directory in which you are going to execute the command. If you do not have this file available, then you may download it from the Microsoft website. Type "spcheck" and a report will be created and dumped into the current directory. You will then have to go to the file and open it will a text editor (notepad.exe will do fine). The report contains a list of important system files and which service pack they have installed or if they are missing.

Tool Name: Windows Domain Manager
Filename: netdom.exe
Format: Command Line
Description: Provides command line administration of domains and trusts

Tool Name: Windows Installer Cleanup Utility
Filename: msicuu.exe
Format: Graphical User Interface
Description: Removes excess registry entries from a faulty installation

Tool Name: Windows Installer Zapper
Filename: msizap.exe
Format: Command Line
Description: The same as the widows installer cleanup utility, only a more in depth version

Tool Name: Xcacls.exe
Filename: xcacls.exe
Format: Command Line
Description: Sets and displays files ACLs


해당 제품의 설치 ( Windows 2003 에만 해당 ) 는 Windows Server Disc 2 를 사용하거나, 다음의 링크에서 받을 수 있다. (32비트용, 64비트는 구글링 합시다. )

http://www.microsoft.com/downloads/details.aspx?FamilyId=6EC50B78-8BE1-4E81-B3BE-4E7AC4F0912D&displaylang=en


어찌보면 당연하게 알고 있어야 할 위와같은 툴을 이제라도 알았으니 앞으로 보다 편한 서버질이 가능 할 듯.

단, 장애 상황에서 사용하기엔 일부 시간이 오래 걸리는 커맨드, 커맨드 조합 등이 있으니 사전에 미리 사용해 보고 실전에서 사용하기를 당부.  ( 책임 회피 )

다소 편안한 Ctrl + C , V 를 할 수 있게 도움을 주신 저멀리 해외의 Andrew Z. Tabona 씨에게 감사의 의미로 링크를.
http://www.windowsnetworking.com/Andrew_Tabona/



( younjin.jeong@gmail.com , 정윤진 )