Managing the Active Directory directory service

Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2

Managing the Active Directory directory service

• Using the Windows interface

• Using command-line tools

Using the Windows interface

The following table lists some of the most common tasks for managing the Active Directory directory service, and the command-line tools you can use to perform them. For more information, click the corresponding link under Tool or Feature.

Task	Tool or feature
Administer Active Directory.	Administering Active Directory
Deploy Active Directory.	Deploying Active Directory
Create a specific desktop configuration of installed applications for a group of users, and manage desktop configurations for a group of users.	Group Policy (pre-GPMC)
Secure and manage user accounts and groups stored locally on your computer.	Local Users and Groups
Set up your directory structure.	Introduction to Active Directory

For more information about deploying Active Directory, see "Part 1: Designing and deploying directory services" at the Microsoft Windows Resource Kits Web site.

For more information about managing Active Directory, see the "Directory services guide" at the Microsoft Windows Resource Kits Web site.

Using command-line tools

The following table lists some of the most common tasks for managing the Active Directory directory service, and the command-line tools you can use to perform them. For more information, click the corresponding link under Command-line tool.

Task	Command-line tool
Import or export data from the Active Directory directory service using files that store data in the comma-separated variable (CSV) format.	CSVDE
Restore default Group Policy objects to their original state (after initial installation).	Dcgpofix
Manage objects and information about those objects in Active Directory.	Directory service command-line tools
Display Group Policy settings and Resultant Set of Policy (RSOP) for a user or computer.	Gpresult
Refresh local and Active Directory-based Group Policy settings, including security settings.	Gpupdate
Create, modify, or delete directory objects on computers running Windows Server 2003 family operating systems or Windows XP Professional; extend the schema, export Active Directory user and group information to other applications or services, or populate Active Directory with data from other directory services.	LDIFDE
Manage the Active Directory database.	Ntdsutil
Administer phone books.	Pbadmin

For more information about the command shell, see Command shell overview. For information about tools used to manage the command-prompt window, see Manage the command-prompt window. For an alphabetical list of all of the command-line tools, see Command-line reference A-Z.