{"id":2020,"date":"2010-02-06T08:59:56","date_gmt":"2010-02-06T16:59:56","guid":{"rendered":"https:\/\/www.zubairalexander.com\/stage\/?p=2020"},"modified":"2018-04-06T20:35:02","modified_gmt":"2018-04-07T03:35:02","slug":"netdom-examples","status":"publish","type":"post","link":"https:\/\/www.zubairalexander.com\/blog\/netdom-examples\/","title":{"rendered":"NetDom Examples"},"content":{"rendered":"

NetDom is a command-line tool that is built into Windows Server\u00a02008. It is available if you have the Active\u00a0Directory Domain Services (AD\u00a0DS) server role installed. To use NetDom, you must run the NetDom command from an elevated command prompt. To open an elevated command prompt, click Start, right-click Command Prompt, and then click Run as administrator.<\/p>\n

You can use NetDom to:<\/p>\n

– Join a computer that runs Windows\u00a0XP Professional or Windows\u00a0Vista to a Windows\u00a0Server\u00a02008 or Windows\u00a0Server\u00a02003 or Windows\u00a02000 or Windows\u00a0NT\u00a04.0 domain.<\/p>\n

– Provide an option to specify the organizational unit (OU) for the computer account.<\/p>\n

– Generate a random computer password for an initial Join operation.<\/p>\n

– Manage computer accounts for domain member workstations and member servers. Management operations include:<\/p>\n

– Add, Remove, Query.<\/p>\n

– An option to specify the OU for the computer account.<\/p>\n

– An option to move an existing computer account for a member workstation from one domain to another while maintaining the security descriptor on the computer account.<\/p>\n

– Establish one-way or two-way trust relationships between domains, including the following kinds of trust relationships:<\/p>\n

– From a Windows\u00a02000 or Windows\u00a0Server\u00a02003 or Windows\u00a0Server\u00a02008 domain to a Windows\u00a0NT\u00a04.0 domain.<\/p>\n

– From a Windows\u00a02000 or Windows\u00a0Server\u00a02003 or Windows\u00a0Server\u00a02008 domain to a Windows\u00a02000 or Windows\u00a0Server\u00a02003 or Windows\u00a0Server\u00a02008 domain in another enterprise.<\/p>\n

– Between two Windows\u00a02000 or Windows\u00a0Server\u00a02003 or Windows\u00a0Server\u00a02008 domains in an enterprise (a shortcut trust).<\/p>\n

– The Windows\u00a0Server\u00a02008 or Windows\u00a0Server\u00a02003 or Windows\u00a02000 Server half of an interoperable Kerberos protocol realm.<\/p>\n

– Verify or reset the secure channel for the following configurations:<\/p>\n

– Member workstations and servers.<\/p>\n

– Backup domain controllers (BDCs) in a Windows\u00a0NT\u00a04.0 domain.<\/p>\n

– Specific Windows\u00a0Server\u00a02008 or Windows\u00a0Server\u00a02003 or Windows\u00a02000 replicas.<\/p>\n

– Manage trust relationships between domains, including the following operations:<\/p>\n

– Enumerate trust relationships (direct and indirect).<\/p>\n

– View and change some attributes on a trust.<\/p>\n

NetDom Commands<\/strong><\/p>\n

Here are the NetDom commands.<\/p>\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
\n

Command <\/strong><\/p>\n<\/td>\n

\n

Description <\/strong><\/p>\n<\/td>\n<\/tr>\n

Netdom add<\/a><\/td>\nAdds a workstation or server account to the domain.<\/td>\n<\/tr>\n
Netdom computername<\/a><\/td>\nManages the primary and alternate names for a computer. This command can safely rename Active Directory domain controllers as well as member servers.<\/td>\n<\/tr>\n
Netdom join<\/a><\/td>\nJoins a workstation or member server to a domain. The act of joining a computer to a domain creates an account for the computer on the domain, if it does not already exist.<\/td>\n<\/tr>\n
Netdom move<\/a><\/td>\nMoves a workstation or member server to a new domain. The act of moving a computer to a new domain creates an account for the computer on the domain, if it does not already exist.<\/td>\n<\/tr>\n
Netdom query<\/a><\/td>\nQueries the domain for information such as membership and trust.<\/td>\n<\/tr>\n
Netdom remove<\/a><\/td>\nRemoves a workstation or server from the domain.<\/td>\n<\/tr>\n
Netdom movent4bdc<\/a><\/td>\nRenames a Windows\u00a0NT\u00a04.0 backup domain controller to reflect a domain name change. This can assist in Windows\u00a0NT\u00a04.0 domain renaming efforts.<\/td>\n<\/tr>\n
Netdom renamecomputer<\/a><\/td>\nRenames a domain computer and its corresponding domain account. Use this command to rename domain workstations and member servers only. To rename domain controllers, use the netdom computername<\/strong> command.<\/td>\n<\/tr>\n
Netdom reset<\/a><\/td>\nResets the secure connection between a workstation and a domain controller.<\/td>\n<\/tr>\n
Netdom resetpwd<\/a><\/td>\nResets the computer account password for a domain controller.<\/td>\n<\/tr>\n
Netdom trust<\/a><\/td>\nEstablishes, verifies, or resets a trust relationship between domains.<\/td>\n<\/tr>\n
Netdom verify<\/a><\/td>\nVerifies the secure connection between a workstation and a domain controller.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

Microsoft has listed lots of examples on TechNet here<\/a>. Here are some of them.<\/p>\n

NetDom Examples<\/strong><\/p>\n

NOTE<\/span>: The following examples apply to at least Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1 and Windows Server 2003 with SP2.<\/p>\n

Example 1: Add a Workstation or Member Server to a Windows\u00a0NT\u00a04.0 Domain<\/strong><\/p>\n

To add the workstation mywksta<\/strong> to the Windows\u00a0NT\u00a04.0 domainreskita<\/strong>, type the following at the command line:<\/p>\n

netdom add \/d:reskita mywksta \/ud:mydomain\\admin \/pd:password<\/p>\n

Example 2: Add a Workstation or Member Server to a Windows Server\u00a02003 Domain<\/strong><\/p>\n

To add the workstation mywksta to the Windows Server\u00a02003 domain devgroup.example.com in the organizational unit (OU) Dsys\/workstations, type the following at the command prompt:<\/p>\n

netdom add\/d:devgroup.example.com mywksta \/OU:OU=Dsys,OU=Workstations,DC=microsoft,DC=com<\/p>\n

Note<\/strong><\/p>\n