Adding a User Principal Name, or UPN, to Active Directory lets you match user logon names to email addresses, for example, among other things. This page describes how to add a UPN to Active Directory, so you can assign the alternate name to a user in Active Directory Users and Computers.
This provides the search syntax for using the dsquery command on a Domain Controller to find the correct Active Directory DN for a user for use in LDAP authentication scenarios. For example:
dsquery user dc=example,dc=com -name user1*
which outputs:
"CN=user1,CN=Users,DC=example,DC=com"
NTPWEdit is a password editor for Windows NT based systems (like Windows 2000, XP and Vista), it can change or remove passwords for local system accounts. This program can NOT decrypt passwords or change domain and Active Directory passwords. This is essentially NTpasswd with a Windows GUI.
This article describes how to transfer Flexible Single Master Operations (FSMO) roles (also known as operations master roles) by using the Active Directory snap-in tools in Microsoft Management Console (MMC) in Windows Server 2003 (using the GUI).
An administrator gracefully demotes a role-holding domain controller by using the Active Directory Installation Wizard. This wizard reassigns any locally-held roles to an existing domain controller in the forest.
Demotions that are performed by using the dcpromo /forceremoval command leave FSMO roles in an invalid state until they are reassigned by an administrator.
ntdsutil /metadata cleanup
To transfer the FSMO roles by using the Ntdsutil utility,
follow these steps:
This article describes how to use the Ntdsutil.exe utility to transfer or to seize Flexible Single Master Operations (FSMO) roles (using the command line).
"AD Tidy is a completely free tool that I created to help other IT Pros out. It can be used to identify when user/computer accounts last logged on to the network and can tidy up these accounts in various different ways."