
To force replication from a domain controller without having to go through to Activeĭirectory Sites and Services, run this command:ħ. To check Active Directory replication on a domain controller, run this command:Ħ. To refresh group policy settings, run this command:ĥ. To list all the FSMO role holders in your forest, run this command:Ĥ. To find all users whose accounts are set to have a non-expiring password, run this command:ĭsquery * domainroot -filter “(&(objectcategory=person)(objectclass=user)(lockoutTime=*))” -limit 0ģ. To quickly list all the groups in your domain, with members, run this command:ĭsquery group -limit 0 | dsget group -members –expandĢ.



Assume that all of these Windows commands should be run from an administrative command prompt if you are using Vista, Windows 7, or Windows 2008. Some could be shortcuts, others might seem like magic, but all are intended to save you time and help you solve problems. The longer a person serves as a network admin, the more tips and tricks they are likely to pick up along the way.
