Windows Management

 Introduction

 Scripts Collection (1)
 Scripts Collection (2)
 Windows Scripting
 Host (WSH)


 WMI

 ADSI

 Windows 2000
 Resource Kit


 Miscellaneous


ActiveXperts
Network Monitor


 Product Overview

 Built-in checks:
 
 Brochure (.pdf file)

 Whitepaper (.pdf)

 Manual (.pdf file)

 Presentation (.ppt)

 Download (.exe file)


Some quotes

 
 Windows&.NET Magazine:
 "Small, smart and very
 very handy"

 
 MonitorTools.com Review:
 "Extremely easy to use,
 great value for money!"


  Download ActiveXperts Network Monitor 7.0  (6239 KB - .exe file)
  Download Manual  (653 KB - .pdf file)

Windows 2000 Resource Kit

The Windows 2000 Resource Kits help IT professionals deploy, manage, and support Windows 2000 operating systems.

There are a number of Windows 2000 Resource Kit software tools available for free download from Microsoft. These tools are listed below, and can help you streamline administrative tasks such as managing Active Directory™, administering security features, working with Group Policy and Terminal Services, automating application deployment, and other important jobs.


Windows 2000 Resource Kit Utility  Description  Download 
Activeperl.exe - Active Perl Perl is a flexible scripting language widely used for system administration on both UNIX and Windows platforms, as well as programming on the World Wide Web. ActivePerl is a Windows implementation of Perl which also enables you to work with the registry and event logs, and can act as an OLE automation controller.  
Adsizer.exe - Active Directory Sizer This tool lets you estimate the hardware required for deploying Active Directory based on your organization's profile, domain information, and site topology. Download 
(1200 KB) 
Apimon.exe - API Monitor This tool monitors a running application for all Application Programming Interface (API) calls a process is making. APIMon counts and times the API calls. It also, optionally, monitors page faults caused by the monitored application and reports them by API call. Download 
(969 KB) 
Appsec.exe - Application Security This tool is a GUI-based application that allows an administrator in a multi-user environment to restrict the access of ordinary users to a predefined set of applications on the network. Enabling application security using this tool will cause the system to reject any attempts by ordinary users to execute a program that they are not authorized to use. Download 
(99 KB) 
Associate.exe This command-line tool enables you to register or unregister a file name extension with the registry. "File extension, executable program" associations enable the Windows 2000 shell to launch the correct executable program when a file with the associated file name extension is opened from the command prompt, from Windows Explorer, or from File Manager.  
Autoexnt.exe - AutoExNT Service The AutoExNT Service allows you to start a custom batch file, Autoexnt.bat, when you start a computer - without having to log onto the computer on which it will run. AutoExNT includes an /interactive option (analogous to the /interactive option of the AT command) that allows you to see the processes started. To use AutoExNT, you must be running Microsoft® Windows® 2000, Microsoft® Windows NT® version 4.0, or Microsoft® Windows NT® 3.5 or later.  
Browmon.exe - Browser Monitor Browser Monitor is a tool with a GUI that monitors the status of browsers on selected domains. Browsers are shown on a per-domain and per-transport basis. The Windows Browser service maintains a list of all available domains and servers. Microsoft® Windows® 2000 Server and Microsoft® Windows® 2000 Professional continue to support the browser service, originally introduced with Microsoft® Windows® for Workgroups version 3.1, to provide for interoperability with domains and computers that are not Active Directory™–enabled.  
Browser Client Context Viewer W3Who is an Internet Server Application Programming Interface (ISAPI) application dynamic-link library (DLL) that works within a Web page to display information about the calling context of the client browser and the configuration of the host server.  
Cachemov.exe - Offline Files Cache Mover This GUI tool allows you to move your offline files cache to a different volume. By default it is created and remains on the root volume. If space is becoming low on the root volume, you will want to move the cache to a different volume thus clearing space on the root volume and allowing Offline Files access to more disk space. To run the program, decide onto which volume you wish to place your offline files cache. Make sure you have access to the volume and that there is free space on it. Then launch the program and select the volume from the list displayed. CacheMov will then proceed through the steps of moving the cache and setting up the necessary security on it.  
Cconnect.exe - Con-Current Connection Limiter This tool provides a method of tracking concurrent connections of users and monitoring what computers users are logged on to a network. It consists of two components, a client and an administrator.  
Certificate Enrollment Module (Mscep.dll) Mscep.dll is a Certificate Services add-on ISAPI dynamic-link library (DLL) that enables enrollment for Cisco Systems, Inc. routers for IPSec authentication certificates from a Microsoft® Windows® 2000 Certificate Authority (CA) using the Simple Certificate Enrollment Protocol (SCEP).  
Chklnks.exe - Link Check Wizard Link Check Wizard scans all of the link (shortcut) files on your system, and checks to see if the shortcut points to an existing application or document. If the associated application or document is not found, the Wizard lists that file as a dead link, giving you the option to remove it.  
Ckymunge.dll - Cookie Munger This tool is included in the Windows 2000 Server Resource Kit only. The Cookie Munger filter is a tool that enables Active Server Pages (ASP) to work with browsers that do not support cookies or that refuse to accept them. ASP uses the ASPSESSIONID cookie to maintain its session state. ASP expects the browser to send this cookie to the server with every request that it makes. The ASPSESSIONID cookie is unique to a session. Without it, ASP does not know which session the user owns and it cannot keep the Session object up to date as the user moves from page to page.  
Cla.msc -: Cybersafe Log Analyst CyberSafe Log Analyst is a Microsoft® Windows® 2000 Security Event Log analysis tool. Designed as a snap-in to the Microsoft Management Console (MMC) used with Windows 2000, the CyberSafe Log Analyst assists you in organizing and interpreting security event logs from Windows 2000, providing more effective, system-wide user activity analysis.  
Clearmem.exe - Clear Memory ClearMem is a command-line tool that forces pages out of RAM. ClearMem attempts to allocate and commit more memory then is physically available, as well as flushing the file cache. In Windows, working sets are allowed to grow until memory pressure forces them to decline. Flushing the file cache is important because some pages in the process working set are part of the file cache (for example, code loaded from a file).  
Clip.exe: Clip To Clipboard This command-line tool copies text from the STDIN stream to the Clipboard. You can then paste the data directly into any application that can receive text from the Clipboard.  
Cliptray.exe - Clipboard Organizer This tool allows you to store and organize blocks of text and copy them into text-based files using the Clipboard. It is useful for developers, authors, support personnel, Webmasters, or anyone who needs to use the same text many times.  
Clusrest.exe - Cluster Quorum Restore Utility This tool is used in a Microsoft® Windows® 2000 cluster after a node has been restored using NtBackup, a component of the Windows 2000 operating system. NtBackup leaves the quorum data in a directory on the node's disk, but does not restore it to the quorum disk at that time. Restoring the quorum disk requires that the cluster be stopped and restarted, which may not be necessary or desirable. If a quorum disk requires a restore, the cluster is most likely down and the operation will not negatively impact operation. Download 
(926 KB) 
Cluster Verification Utility This tool verifies that a two-node cluster is set up properly. Download 
(811 KB) 
Clustool.exe: Microsoft Cluster Tool This tool assists you with a few common tasks related to the Cluster service (part of Microsoft® Windows® 2000), including backing up and restoring a cluster configuration and moving resources to a cluster. A server cluster is a group of independent computer systems working together as a single system to ensure that mission-critical programs and resources remain available to clients. Clustered computers must be running Windows 2000 Advanced Server.  
Cmdhere.inf - Command Prompt Here This shell extension adds a CMD Prompt Here command to the context menu that is available when you right-click in the Folders (left) pane of Windows Explorer. Selecting this option from the context menu creates a new command-prompt session with the same path as that of the object that is right-clicked.  
Compress.exe - File Compression Utility This command-line tool can compress one or more files. These compressed files can be expanded with Expand.exe: File Expansion Utility.  
Copslpm.exe - Common Open Policy Service Local Policy Module The COPS (Common Open Policy Service) LPM (Local Policy Module) enables a COPS-based Policy Server to provide admission control decisions to a Windows 2000 ACS (Admission Control Service) for RSVP (Resource Reservation Protocol) requests. The ACS acts as the logical gatekeeper for RSVP message propagation across the network. With the COPS LPM installed on the ACS, the RSVP requests are passed to the COPS Policy Server for admission control decisions. The COPS LPM communicates with the COPS Policy Server using the COPS protocol.  
Counters.chm - Windows 2000 Performance Counters The Windows 2000 Performance Counter Reference describes all performance objects and counters provided for use with tools in the Performance snap-in of Windows 2000. Use this reference to learn how monitoring counter values can assist you in diagnosing problems or detecting bottlenecks in your system. See the Windows 2000 Resource Kit Release Notes (Readme.htm) for more information.  
Cpustres.exe - CPU Stress Utility CPU Stress Utility is a GUI-based tool that consumes processor cycles by continuously running an endless loop. With this tool, you can activate up to four threads, setting individual thread priority and activity levels.  
Creatfil.exe - Create File This command-line tool creates an artificial file of any size. This is useful for testing the behavior of tools, applications, and setup programs under conditions of low available memory on a hard disk. Create File must be run from the command prompt; it cannot be run from the Run command on the Start menu.  
Ctrlist.exe - Counter List CtrList is a command-line tool that lists all objects and counters installed in the system for the given language ID. Download 
(613 KB) 
Cusrmgr.exe - Console User Manager This command-line tool enables editing of many of the properties available through the Local Users and Groups, a Microsoft® Windows® 2000 system tool that is part of the Computer Management MMC snap-in. With CusrMgr, you can rename or delete users, set passwords, and set or reset other user properties.  
CyberSafe Log Analyst CyberSafe Log Analyst is a Microsoft® Windows® 2000 Security Event Log analysis tool. Designed as a snap-in to the Microsoft Management Console (MMC) used with Windows 2000, the CyberSafe Log Analyst assists you in organizing and interpreting security event logs from Windows 2000, providing more effective, system-wide user activity analysis.  
Defptr.exe - Default Printer Using this tool, you can easily change your default printer, switching between available network or local printers. Network printers tend to get busy at erratic intervals, which can require periodically switching the default to avoid "traffic jams." Default Printer allows you to toggle between available printers - local and network. The tool can be used for other purposes as well: for example, to switch printers while working in applications that support only the default printer  
Delprof.exe - User Profile Deletion Utility DelProf tool deletes user profiles on computers running Microsoft® Windows® 2000. On Windows 2000, user profiles can grow quite large (easily over a megabyte each), which takes up considerable disk space when several people are using one computer. With this tool, administrators can free up disk space on a computer when some users are no longer working on it.  
Delrp.exe - Delete File and Reparse Points This command-line tool deletes a file or directory and any associated reparse points. Download 
(607 KB) 
Delsrv.exe - Unreigster a Service This command-line tool unregisters a service by using Services Control Manager. Download 
(606 KB) 
DH.exe - Display Heap DH is a command-line tool to display information about heap usage for user-mode processes or pool usage in kernel-mode memory. It also enables you to lock heaps, tags, stacks, and objects. DH accepts command-line switches to identify which process to display information for and what information to display, and writes formatted output to a text file. Download 
(621 KB) 
Dhcploc.exe - DHCP Server Locator Utility DHCP Server Locator Utility displays the DHCP servers active on the subnet. If it detects any unauthorized DHCP servers, it beeps and sends out alert messages. It also displays packets that it detects from DHCP servers; you can specify whether to display packets from all DHCP servers or only from unauthorized servers.  
Dhcpobjs.exe - DHCP Objects DHCP Objects is an automation object-model library for the Microsoft® DHCP server. It allows administrators and developers to write applications and scripts to administer a DHCP server remotely. It provides enhanced capabilities over Dhcpcmd.exe (a tool included in the Microsoft® Windows® 2000 Support Tools), such as the ability to remove a DHCP lease.  
Diskmap.exe This command-line tool produces a detailed report on the configuration of the hard disk that you specify. It provides information from the registry about disk characteristics and geometry, and reads and displays data about all of the partitions and logical drives defined on the disk. Download 
(623 KB) 
Diskpar.exe - Disk Alignment Tool DiskPar is a command-line tool that finds and modifies the starting sector on a disk to improve disk performance. It is only used with multi-disk systems. Windows has an internal structure called the Master Boot Record (MBR) that limits the maximum default hidden sectors to 63. For this reason, the default starting sector for disks that report more than 63 sectors/track is the 64th sector. For disks with 64 or more sectors/track this can cause misalignment when data is transferred to and from the disks. For example, with a disk that has 64 sectors/track, what appear to be track aligned transfers begin at the last sector of one track and span to the next track  
Diskuse.exe DiskUse is a command-line tool that scans directories on a hard disk and reports on space used by each user. This tool can scan a single directory, a directory tree, or an entire drive and can extract information on one user or all users. Reports can be displayed on-screen or output to a file, in table or text format. DiskUse can also list all the files owned by a user or users, filtered in a variety of ways  
Dmdiag.exe - Disk Manager Diagnostics Disk Manager Diagnostics is a command-line tool that puts out system state and configuration information describing disk storage. Download 
(673 KB) 
Dommon.exe - Domain Monitor Domain Monitor monitors the status of servers in a domain and the secure channel status to the domain controller and to domain controllers in trusted domains. Domain Monitor displays the domain controller name and a list of trusted domains, plus various status errors.  
Drivers.exe - List Loaded Drivers Displays information on installed device drivers, their files, and their code. Download 
(939 KB) 
Drmapsrv.exe - Drive Share DrMapSrv is a Terminal Services command-line tool that configures NET SHARE and NET USE client drives for Terminal Services server access. Download 
(86 KB) 
Dsstore.exe - Directory Services Store This tool assists in managing Enterprise Public Key Integration. It includes functionality necessary for several deployment scenarios.  
Dumpcfg.exe - Dump Config This command-line tool simplifies the manual system recovery process associated with storage configuration. You must a member of the Administrator group to run this tool. Use Dump Config to display system, disk and volume information or to change your disk signature  
Dumpel.exe - Dump Event Log Dump Event Log is a command-line tool that dumps an event log for a local or remote system into a tab-separated text file. This tool can also be used to filter for or filter out certain event types. Download 
(636 KB) 
Dumpfsmos.cmd - Dump FSMO Roles This command-line tool dumps the Flexible Single Master Operation (FSMO) roles for a domain. Using DumpFsmos, you can find the names of the domain controllers that are performing forest-wide operations master roles, including schema master and domain naming master, and domain-wide operations master roles, including RID master, primary domain controller emulator, and infrastucture master. Download 
(604 KB) 
Dureg.exe - Registry Size Estimator DuReg is a command-line tool that enables you to discover how much data is stored in the registry, or in any registry subtree, key, or subkey. The tool also enables you to search for all occurrences of a text string in the registry. This search can be limited to a specific subtree. Download 
(622 KB) 
Efsinfo.exe - Encrypting File System Information This command-line tool displays information about files and folders encrypted with Encrypting File System (EFS) on NTFS partitions. EFS is a feature of Windows 2000 that enables users to encrypt and decrypt files. This helps users keep files safe from intruders who might gain unauthorized physical access to their sensitive data (for example, by stealing a laptop or external disk drive) Download 
(608 KB) 
Elogdmp.exe - Event Log Query Tool ElogDmp is a command-line tool that dumps information from a selected event log. Using ElogDmp, you can display any of the following logs either locally or remotely: application, system and security. When used in conjunction with the FindStr.exe tool (in the %systemroot%\System32 directory), you can query for specific event log messages to display.  
Empty.exe - Empty Working Set Empty is a command-line tool that frees the working set of a specified task or process. A working set is a subset of virtual pages resident in physical memory. Empty frees the working set of a process, making those page frames available for use by other processes  
Enumprop.exe - Enumerate Properties This command-line tool dumps all properties set on any directory service object. Using EnumProp, you can display the security descriptor or list only a given set of attributes for an object. EnumProp also recognizes globally unique identifiers (GUIDs) (objectGUID and schemaGUID) and security identifiers (SIDs). It then displays those properties accordingly.  
Exctrlst.exe - Extensible Performance Counter List This tool provides information on the performance counter DLLs that have been installed on a computer running Microsoft® Windows® 2000, listing the services and applications that provide performance information via the Windows 2000 registry. When monitored using the Performance console provided in Windows 2000, the data provided by these performance counters can be useful for optimizing and troubleshooting. Download 
(615 KB) 
Exetype.exe - Finding the Executable Type ExeType is a command-line application that identifies the operating system environment and processor required to run a particular executable file.  
Expand.exe - File Expansion Utility This command-line tool enables you to expand files that have been compressed by Compress.exe: File Compression Utility. Expand can also extract compressed files from a cabinet (.cab) file. Microsoft® Windows® 2000 includes Driver.cab, which contains thousands of files, and users can use this tool to expand one or a few from this cabinet for system recovery.  
Extract.exe - Extract Cabinet This command-line tool extracts individual files from compressed cabinet (.cab) files. Using cabinet files is a highly efficient method of compression and distribution that has been used by Microsoft for many years. It is now available to anyone who needs to compress and distribute multiple files. The cabinet file format is a non-proprietary format based on Lempel-Ziv compression. At the heart of this format is the MakeCAB compression tool, a loss-less data compression tool included with Windows 2000 that provides efficient compression for setup programs and Internet applications alike. With MakeCAB, you can store multiple files in a single cabinet file and carry compression across files. Download 
(648 KB) 
Fcopy.exe - File Copy Utility for Microsoft Message Queuing FCopy is a multi-server file copy tool that compresses files and folders to facilitate copying across LANs and WANs. Because it uses Message Queuing, this tool continues to copy files even if there are network problems. It includes update options which copy files only if they have been changed. FCopy divides files into 32 kilobyte segments, compresses each segment and sends it as a Message Queuing message (in express mode). It does not need to restart when a network breakdown occurs since Message Queuing guarantees that the messages will be delivered.  
Filespy.exe - File Spy This tool allows you to monitor both local and network drives to see what types of I/O Request Packets (IRP) and Fast I/O operations are executing in the system. It is a general-purpose diagnosis tool for anyone who wants to understand the file activity in a system. FileSpy aids Installable File System (IFS) filter driver writers in understanding the I/O that is occurring in the system. FileSpy was developed as a useful example of how to write an IFS filter driver. This driver sits in the I/O stack and records the relevant information for the I/O operations that are happening, such as the starting time, the completion time, and return status.  
Findgrp.exe - Find Group This tool finds all direct and indirect group memberships for a specified user in a domain. Find Group can help determine a particular user's access to Windows 2000 domain controllers in a domain by listing the groups in which the user is a member.  
Floplock.exe - Lock Floppy Disk Drives FloppyLock is a service that allows you to control access to the floppy drives of a computer. This service can be used to help prevent unauthorized software installation or the introduction of viruses via floppy disks. When the service is started on Windows 2000 Professional, only members of the Administrators and Power Users groups can access the floppy drives. When the service is started on Windows 2000 Server, only members of the Administrators group can access floppy drives. FlopLock works by assigning a Discretionary Access Control List (DACL) to a floppy drive. When FlopLock has the floppy drives on a machine locked, only users in the Adminstrators group can use the floppy drive(s). If the FloppyLock service is configured to start automatically, the lock stays in place even after the computer is restarted.  
Forfiles.exe This command-line tool can be used in a batch file to select files in a folder or tree for batch processing. ForFiles enables you to run a command on or pass arguments to multiple files. For example, you could run the TYPE command on all files in a tree with the *.txt extension. Or you could execute every batch file (*.bat) on the C:\ drive with the file name "Myinput.txt" as the first argument  
Freedisk.exe This command-line tool checks for free disk space. When it is used in a batch file, it returns a "0" if there is enough space and a "1" if there isn't. When used from the command line, FreeDisk returns "OK" when the disk space is available, and "Too Small" when it isn't.  
Ftedit.exe - Fault Tolerance Registry Information Editor This GUI tool allows you to create, edit, and delete fault tolerance sets for disk drives and partitions of local and remote computers. Information on disks and fault tolerance is stored as disk keys in the registry. To read it, you only need guest access (by default), but to change it, you must have the permissions necessary to write to the SYSTEM key of the registry.  
Getmac.exe - GetMAC GetMAC provides a quick method for obtaining the MAC (Ethernet) layer address and binding order for a computer running Windows 2000, locally or across a network. This can be useful when you want to enter the address into a sniffer, or if you need to know what protocols are currently in use on a computer. Download 
(603 KB) 
Getsid.exe GetSID compares the user security IDs (SIDs) of two accounts. You can use it to compare account SIDs between a primary domain controller and backup domain controller when you suspect user database corruption.  
Getsid.exe - Get Security ID GetSID compares the user security IDs (SIDs) of two accounts. You can use it to compare account SIDs between a primary domain controller and backup domain controller when you suspect user database corruption. Download 
(955 KB) 
Gettype.exe - Get Type Version Information This command-line tool allows you to detect what type of operating system—Microsoft® Windows® 2000 or Microsoft® Windows NT®; workstation, server or domain controller—is installed on a computer. GetType is useful for administrators who need to detect Windows software installations in a mixed environment before performing some action in a batch file. Sometimes it is necessary to run software or scripts only on clients or servers running a particular variety of Windows 2000 or Windows NT.  
Global.exe This command-line tool displays members of global groups on remote servers or domains. For Microsoft® Windows® 2000 Server, a global group is one that can be granted permissions and rights and can become a member of local groups in its own domain, the member servers and workstations thereof, and trusting domains. However, a global group can contain user accounts only from its own domain. Global groups provide a way to create sets of users from inside the domain, available for use both in and out of the domain.  
Gp.chm - Windows 2000 Group Policy Reference This HTML Help document provides detailed descriptions of the Group Policies in Windows 2000. These descriptions detail the effects of enabling, disabling, and not configuring each policy, and offer explanations of how related policies interact. Policies covered include Windows Settings and Administrative Templates for Computer Configuration and Administrative Templates for User Configuration.  
Gpolmig.exe - Group Policy Migration This command-line tool helps to migrate Microsoft® Windows NT version 4.0 System Policies to Microsoft® Windows® 2000. GPolMig migrates settings from Windows NT 4.0 policy files to the Windows 2000 Group Policy object structure. The location of the registry settings that implements software policy has changed in Windows 2000 and therefore the migration might not have an effect on some applications and components.  
Gpotool.exe - Group Policy Verification Tool This command-line tool allows you to check the health of the Group Policy objects on domain controllers. Download 
(1100 KB) 
Gpresult.exe - Group Policy Results This command-line tool displays information about the result Group Policy has had on the current computer and logged-on user. Download 
(1200 KB) 
Grpcpy.exe - Group Copy This GUI-based tool enables users to copy the user names in an existing group to another group in the same or another domain or on a computer running Microsoft® Windows® 2000.  
Guid2obj.exe - GUID to Object This command-line tool maps a GUID to a distinguished name. In Microsoft Windows 2000, each security principal (user, group, or computer) is identified by a unique security identifier (SID) in the form of a GUID. In Active Directory directory service, each object has a distinguished name. This tool enables you to associate the two. Download 
(614 KB) 
Heapmon.exe This command-line tool enables you to view system heap information. Download 
(606 KB) 
Htmlfltr.exe - HTML Text Filter HTML Text Filter is a command-line tool that removes comments and extra white space from HTML files, decreasing browser load time and improving performance. If a directory is specified, HTML Text Filter compresses uncompressed ASP, HTM, and HTML files, recursing to all subdirectories if /S is specified. If a file (or file pattern with wildcard characters) is specified, it compresses all matching files.  
Httpcmd.exe - Command-line HTTP client HTTPCmd is a command-line HTTP client. It lets you send requests to a server from a command prompt, and observe the returns. The server's reply is sent to STDOUT, and is displayed in the command window.  
Httpmon.exe - HTTP Monitoring Tool HTTP Monitoring Tool is a multithreaded Windows 2000 service-monitoring tool that gathers large amounts of data about a Web site. HTTP Monitoring Tool is controlled by a configuration file (HTTPMon.ini), which you must edit to suit your testing needs. It is designed to test a large number of computers through the configuration of the .ini file and generate either a standard comma-separated file (CSV), or entries in the Windows 2000 event log.  
Iasparse.exe - IAS Parse Tool This command-line tool parses Internet Authentication Service (IAS) and remote access server logs and converts them into a readable format. The log file generated both these services is very cryptic to be understood by an ordinary user. IAS can create a log file based on the authentication and accounting requests received from the network access servers when using Remote Access Dial-In User Service (RADIUS) authentication. Remote access server can also log such information when using Microsoft® Windows® 2000 authentication.  
Ierk5.chm - Internet Explorer 5 Resource Kit The Internet Explorer 5 Resource Kit (IERK) details the ways that you can best customize and use Internet Explorer 5 for your needs. It covers the planning process from deciding which components and features to include to distributing Internet Explorer throughout your organization or to your customers. It describes how you can make the most of browser functionality and showcase your content. It also provides detailed coverage of installation options and outlines ways to best handle support and maintenance.  
Ifilttst.exe - IFilter Test Suite IFilter Test Suite validates IFilter implementations by calling IFilter methods and checking the returned values for compliance with the IFilter specification.  
Ifmember.exe IfMember is a command-line tool that checks whether the current user is a member of a specified group. It is typically used in Windows logon scripts and other batch files. IfMember uses its own process token to discover group membership, rather than querying the relevant domain controller each time it runs. While this has a significant performance benefit, it does mean that IfMember will only be aware of groups on the local computer, on the computer's domain, and on trusted domains.  
Iishostsvc.exe - IIS Host Helper Service The Host Helper Service is a service that registers host header strings as NetBIOS names. This allows users on an intranet that are using WINS to access the Web server by the host header name without registering the Web server's name with a DNS server.  
Installation Monitor This command-line tool tracks changes made by Setup programs in any secondary processes they invoke, including changes to registry entries, files and .ini file entries. Installation Monitor creates a .iml file that documents all those changes, along with enough information to undo all the changes.  
Instsrv.exe - Service Installer Service Installer is a command-line tool that installs and uninstalls executable (.exe) services and assigns names to them. To run Instsrv.exe, you must be part of the Administrators group. By default, services added with this tool are not started. To start a service via the command-line, see the Service Controller Tool (SC).  
Intfiltr.exe - Interrupt Filter IntFiltr is a command-line tool used on multiprocessor systems to affinitize interrupts of disk or network adapters to one or more processors. Affinitizing interrupts to a processor can improve system performance by improving processor cache locality. Using IntFiltr, you can direct a device's interrupts to a specific set of processors. In a computer with multiple processors, Microsoft® Windows® 2000 sets (by default) the interrupt controller to direct a device's interrupts at any available processor. This means an interrupt will be serviced by the processor with the lowest priority, or IRQL  
Inuse.exe - File-In-Use Replace Utility InUse is a command-line tool that performs on-the-fly replacement of files currently in use by the operating system. You must be a member of the Administrators group to use this tool. Download 
(1200 KB) 
Ipsecpol.exe - Internet Protocol Security Policies Tool This command-line tool configures InterIPSecPol has two mutually exclusive modes: static and dynamic. The default mode is dynamic. Dynamic mode plumbs policy into the Policy Agent, which is active only for the lifetime of the Policy Agent service. This means it will not be active after a reboot or stopping of the service. The benefit of dynamic mode is that the policy can co-exist with directory service-based policies, which override any local policy not plumbed by IPSecPol Download 
(147 KB) 
Javareg.exe - Java/COM Registration Utility This command-line tool registers Java classes as COM components in the registry. It performs functions similar to Regsvr32.exe, a tool included with the Microsoft® Windows 2000 operating system.  
Kerbtray.exe - Kerberos Tray http://download.microsoft.com/download/win2000platform/kerbtray/1.00.0.1/NT5/EN-US/kerbtray_setup.exe Download 
(126 KB) 
Kernprof.exe - Kernel Profiler This command-line tool provides counters for and profiles of various functions of the Microsoft® Windows® 2000 kernel. With Kernel Profiler, you can monitor details and frequency for each function the kernel calls, how often a process switches from User mode to Kernel mode, and, on a multi-processor computer, display information for each processor.  
Kix32.exe - KiXtart 95 KiXtart 95 is a logon script processor and enhanced batch language for computers running Windows 32-bit operating systems in a Windows Networking environment. With KiXtart 95's free-format scripting language, you can conditionally display information, set environment variables, start programs, connect to network drives, read or edit the registry, and change the current drive and directory.  
Klist.exe - Kerberos List Kerberos List is a command-line tool that enables you to view and delete Kerberos tickets granted to the current logon session. To use this tool, and see any tickets, your Windows 2000 computer must be joined to a Windows 2000 domain. Download 
(136 KB) 
Leakyapp.exe This GUI tool appropriates system memory to test how other applications or the system as a whole runs in low-memory situations. LeakyApp allocates all available memory to its own process and retains the memory until it is stopped or reset. When the tool stops, the memory it has allocated is released. LeakyApp shows how the system responds to a process that is allocating a disproportionate share of memory. This demonstration can help administrators identify other applications that use a disproportionate share of memory.  
Linkd.exe This command-line tool links an NTFS directory to a target object. LinkD grafts the target name directly into the name space at the specified source directory, so that the source directory subsequently acts as a name-space junction. A junction acts as a surrogate, standing in for the target object in the directory tree. The source directory must reside on a drive formatted with NTFS 5.0. The destination or target of the link can be any valid Microsoft® Windows® 2000 directory name, device name, or object name. When the target name does not resolve to a directory or a device, open calls fail.  
List.exe: Text Display and Search Tool This simple text display and search tool lists the contents of a file. Unlike other text display tools, List is a good tool for looking at large text or log files because it does not read the whole file into memory when you open it. List is useful for displaying text or log files remotely and for use on servers where administrators are concerned with degradation of system performance.  
Local.exe This command-line tool displays members of local groups on remote servers or domains. For computers running Microsoft® Windows® 2000 Professional, a local group is one that can be granted permissions and rights from the local computer and, if the computer participates in a domain, user accounts and membership in global groups both from its own domain and from trusted domains. To manage users and groups on your computer in Windows 2000, use Local Users and Groups, under the System Tools node of the Computer Management MMC snap-in, one of the Administrative Tools.  
Logevent.exe - Event Logging Utility This tool enables you to make entries to the Event Log on either a local or remote computer from the command prompt or a batch file. The program is particularly useful for storing historical information from the execution of batch programs run from Login Scripts or the AT command. Its ability to store entries into the event log of other computers allows these data to be collected centrally, if required. In order to allow the Event Log Viewer to properly display the entry, the application should be installed onto the computer being used to view the event log. Installation is automatically performed when the LogEvent program is used for the first time.  
Logoff.exe This tool is used to log a user off from the command prompt. Use LogOff in unattended installation routines to automate ending the current user session. In combination with the autologon registry settings, LogOff enables your script to log on, perform some task such as installation, and log off without user intervention.  
Logtime.exe This command-line tool logs the start or finish of command-line programs from a batch file. This is useful for timing and tracking batch jobs such as mail-address imports. LogTime creates a log file called Logtime.log, with a date-and-time stamp next to the specified parameter (text_string in LogTime syntax). When called from within a batch file, the date-and-time stamp records when LogTime (with the given parameter) was run by the batch file. If, for example, LogTime is run before and after a command-line program in a batch file, Logtime.log will record the start and stop time of that program.  
Lsreport.exe: Terminal Services Licensing Reporter This command-line tool displays information about licenses granted by Terminal Services license servers. It connects to Terminal Services license servers to obtain information about the license key packs installed on the servers.  
Lsreport.exe: Terminal Services Licensing Reporter This command-line tool displays information about licenses granted by Terminal Services license servers. It connects to Terminal Services license servers to obtain information about the license key packs installed on the servers.  
Lsview.exe - Terminal Services License Server Viewer This GUI-based tool displays the name and type of the available Terminal Services license servers in the user's current domain. It is useful for for monitoring and logging the status of license servers. The LsView window includes a Time field listing the day and time when each server was last available. The list refreshes every five minutes. At each update, the tool writes all statistics to a log file.  
Mcast.exe This command-line tool can be used to send multicast packets or to listen for packets being sent to a multicast group address. Mcast is useful for testing whether or not there is multicast connectivity between two computers on your network. This can be done by using Mcast to send packets from one of the computers on your network to the group address you wish to test. On the computer for which you want to test connectivity, you can use Mcast to listen for packets received on the group address. Using this method, you can determine whether or not there is multicast connectivity between the two computers.  
Mcopy.exe This command-line tool can be used in place of the MS-DOS Copy command in a batch file to copy specified files from one directory to another. It differs from the Copy command in that it creates a log file during the operation, which can be useful for troubleshooting or administrative purposes. Also unlike the Copy command, MCopy cannot be used with wildcards. For logged copy operations involving entire directories or directory trees, see Mtc.exe.  
Metaedit.exe: Metabase Editor Metabase Editor is a tool that allows you to browse and modify attributes in the IIS metabase. It is similar in functionality to Regedit.exe. This tool also allows you to backup, restore, import, and export the metabase; and add, modify, rename, and delete metabase keys.  
Mibcc.exe - SNMP MIB Compiler This tool compiles SNMP MIB files. The SNMP service for Microsoft® Windows® 2000 supports multiple MIBs using an extension-agent API interface. An extension-agent DLL for the Simple Mail Transport Protocol (SMTP) is included with Windows 2000, and other extension-agent DLLs can be added. Previous versions of the Resource Kit have shipped MIBs to support the Internet MIB II (a subset of the LAN Manager MIB II objects), Host Resources MIB objects, and many more.  
Msinfosetup.exe - Microsoft System Information Extensions The Microsoft System Information utility uses a set of controls to collect and display information on computers running Microsoft® Windows® 95, Microsoft® Windows® 98, and Microsoft® Windows NT® version 4.0. On Microsoft® Windows® 2000, these controls are no longer used and are not installed with the operating system. The Microsoft System Information Extensions provide the necessary files to allow Windows 2000 users to open and view System Information (.nfo) files or Windows Report Tool .cab files that were created on these other versions of Windows.  
Mtfcheck.exe - Microsoft Tape Format Verification Tool This command-line tool enables you to verify that the format of a tape is compliant with the Microsoft Tape Format (MTF) specification. With it, you can verify any data written by NtBackUp, HSM, or any application that uses MTF. By verifying the data, you can make sure that the data is accessible to any MTF compliant application. MtfCheck can restore any file on any MTF-compliant tape without using Hierarchical Storage Management (HSM), NtBackUp (a Windows 2000 tool), or the application that wrote the tape. It can also erase a tape by zeroing all its data.  
Netclip.exe - Clipboard Viewer This GUI tool lets you view the contents of the clipboard of another computer on the network, and to cut and paste any data, in any format, to and from the other computer by dragging and dropping. The same user must be logged into both computers when using NetClip.  
Netcons.exe - Net Connections This GUI tool monitors and displays current net connections, taking the place of the Windows command-line command net use. NetCons can be viewed as a dialog box or minimized in the status area, next to the clock. When the tool is minimized, you can right-click the NetCons icon to view the list of net connections.  
Netset.exe This tool can be used to configure a variety of network parameters from the command prompt. It can list, install, configure and uninstall networking components. This makes NetSet useful for automating post-setup network configuration in unattended mode when deploying Windows 2000 on multiple computers. NetSet can also facilitate unattended resetting of network parameters on individual computers when recovering from user errors or hardware failures.  
Netsvc.exe - Command-line Service Controller You can use this tool to remotely start, stop, pause, continue, and query the status of services from the command line. To use NetSvc, you need no special rights unless the owner of a computer has blocked out all users. To use the /stop or /start options, you must have an account on the target computer with privileges that allow starting or stopping services.  
Nlmon.exe - NL Monitor This command-line tool can be used to list and test many aspects of trust relationships. NLMonitor uses the Computer Browser service to enumerate domain controllers. Therefore if browsing is not working correctly, NLMonitor may produce inconsistent results. Also, the computer where NLMonitor is run, and also those providing the browsing services, must share the same protocols that are used by the domain controllers to carry out their domain activity.  
Now.exe Now displays the current date and time on STDOUT, followed by any command-line arguments you add. Now is similar to the MS-DOS ECHO command, but with a timestamp. The tool is useful for logging times from .bat or .cmd files in order to track progress.  
Ntimer.exe - Program Timer Ntimer is a command-line tool that measures how long a program runs. It shows Elapsed Time (ETime), time in User Mode (UTime) and time in Privileged Mode (KTime). These are expressed in hours:minutes:seconds.milliseconds. Time is actually accurate only to the resolution of the timer, which is 10 milliseconds on the x86 architecture.  
Ntrights.exe With this command-line tool, you can grant or revoke any Windows 2000 right for a user or group of users on a local or remote computer. You can also place an entry in the computer's event log noting the change. The tool is useful in unattended or automated installations of Microsoft® Windows® 2000 during which you may want to change the Windows 2000 default rights. You can also use it in situations where you need to change a right in an existing installation, but you can't access and logon to all computers.  
Oh.exe - Open Handles This command-line tool shows the handles of all open windows. You can also constrain OH to only show information relating to a specific process, object type, or object name. This feature is useful for finding which process has a file open when a sharing violation occurs. To function properly, OH must enable a kernel option which maintains a linked list of all objects by object type. If not set, OH enables this option and notifies you that you must reboot before OH will function. After rebooting, OH can display information. Download 
(604 KB) 
Oidgen.exe - OID Generator OID Generator generates a pair of unique base object identifier values for use in extending the Active Directory schema. One object identifier is for use in defining new Attibutes, the other for defining new Classes.  
Oleview.exe - OLE/COM Object Viewer This administration and testing tool enables you to browse in a structured way, configure, activate, and test all of the Microsoft Component Object Model (COM) classes installed on your computer. Using this tool, you can also configure local or system-wide COM settings, including security settings, and enable or disable Distributed COM. You can activate COM classes locally or remotely, which is helpful for testing Distributed COM setups. OleView fully supports the Component Categories specification, which is a core COM technology. Download 
(655 KB) 
Pathman.exe This command-line tool enables you to add or remove components of both the system and user paths. It can modify any number of paths in a single call and includes error checking that can handle path abnormalities such as repeated entries, adjacent semicolons, and missing entries. Windows 2000 manages two different types of paths; the current user's path and the system path. Windows 2000 keeps a separate user path for every user on a system, but there is only one global system path. When a user logs on to a computer running Windows 2000, these two paths are combined to create the user's full path. For backward compatibility, Windows 2000 also loads path information from old Autoexec.bat files left in the root directory. Download 
(125 KB) 
Perfmon4.exe - Performance Monitor 4 Performance Monitor 4 is a graphical tool for measuring the performance of your own computer or other computers on a network. On each computer, you can view the behavior of objects, such as processors, memory, cache, threads, and processes. Each of these objects has an associated set of counters that provide information about device usage, queue lengths, delays, and information used to measure throughput and internal congestion.  
Perfmtr.exe - Performance Meter This command-line tool displays text-based information on the performance of a computer running Windows 2000.  
Permcopy.exe This command-line tool copies share (Full Control, Read, Change) and file (Full Control, Modify, Read & Execute, Read, Write, Traverse Directory) level permissions (ACLs) from one share to another.  
Perms.exe - File Access Permissions per User Perms displays a user's access permissions for a specified file or set of files. Download 
(616 KB) 
Pfmon.exe - Page Fault Monitor This tool enables you to monitor the page faults that occur as you run an application. Page Fault Monitor produces a running list of hard and soft page faults generated by each function call by the application.  
Playback.exe - Playback The Playback tool records requests coming into your Microsoft® Internet Information Services (IIS) site and allows them to be played back against the same or another IIS server that mirrors the original server's content.  
Pstat.exe - Process and Thread Status PStat is a character-based tool that lists all running threads and displays their status. This tool is similar to Qslice.exe, but uses a command-line rather than a GUI interface. Download 
(1200 KB) 
Ptree.exe - Process Tree Process Tree allows you to query the process inheritance tree and kill processes on local or remote computers. By default, local Administrators, Power Users, and Users can query the tree, but only local Administrators and Power Users can kill processes.  
Pulist.exe This command-line tool displays processes running on local or remote computers. PuList works much like TList (a Support Tool on the Windows 2000 CD), but also lists the user name associated with each process on a local computer. Download 
(620 KB) 
Qgrep.exe - Quick Grep This tool is used to search a file or set of files for a particular string or pattern. It is much like the POSIX tool grep.exe.  
Qslice.exe - CPU Usage by Processes Quick Slice shows the percentage of total CPU usage for each process in the system. This tool is similar to Pstat.exe, but it presents the information in a graphical format. Download 
(641 KB) 
Qtcp.exe This command-line tool measures end-to-end network service quality. Qtcp sends a sequence of test packets through a network, then reports on the queuing delay experienced by each packet. Packets that do not arrive at the destination are recorded as dropped packets. This tool can be used on either a production network or a controlled test network. Download 
(182 KB) 
Quickres.exe: Quick Resolution Changer This tool enables you to change your display's visible screen area (resolution), bit depth, and vertical refresh rate (Microsoft® Windows® 2000/Microsoft® Windows NT® only) from the taskbar, without restarting the operating system. QuickRes resides as an icon in the status area, the notification area at the right end of the taskbar. Single-click the icon with the left mouse button to dyn