Netdom.exe: Windows 2000 Domain Manager

This tool enables administrators to manage Windows 2000 domains and trust relationships from the command line.

You can use NetDom to:

Join a Windows XP Professional computer to a Windows NT 4.0 or Windows 2000 domain, and:
- Provide an option to specify the organizational unit for the computer account.
- Generate a random computer password for initial join.
Manage computer accounts for domain member workstations and member servers:
- Add, Remove, Query.
- Provide an option to specify the organizational unit for the computer account.
- Provide an option to move an existing computer account for a member workstation from one domain to another and maintain the security descriptor on the computer account.
Establish one-way or two-way trust relationships between domains, including the following kinds of trust relationships:
- From a Windows 2000 domain to an Windows NT 4.0 domain.
- From a Windows 2000 domain to a Windows 2000 domain in another enterprise (an "uplevel" external trust).
- Between two Windows 2000 domains in an enterprise (a shortcut trust).
- The Windows 2000 half of an interoperable Kerberos realm.
Verify and/or reset the secure channel for the following configurations:
- Member workstations and servers.
- BDCs in a Windows NT 4.0 domain.
- Specific Windows 2000 replicas.
Manage trust relationships between domains:
- View all trust relationships.
- Enumerate direct trust relationships.
- Enumerate all (direct and indirect) trust relationships.

Note

You must run NetDom from the command window.

Corresponding UI

Much of the functionality of NetDom can be accessed from Active Directory Users and Computers, a Microsoft Management Console snap-in that is part of the Windows XP Professional operating system.

Note

You must install Adminpak.msi before you can see the Active Directory Users and Computers snap-in in Administrative Tools.

A trust relationship is a defined affiliation between domains that enables pass-through authentication. Simply put, a one-way trust relationship between two domains means that one domain (the trusting domain) allows users who have accounts on the other domain (the trusted domain) to access its resources. The trusting domain, also known as a resource domain, may or may not have users of its own, but when a user tries to access a file or printer in its domain, it treats that user as one of its own. The trusted domain, also known as the account domain, does not recognize the users from the trusting domain; in fact, the trust relationship has little effect on the domain. The one-way trust relationship described here can be helpful in master domain models, but they are not the only kind of trusts. When two one-way trusts are established between domains, it's known as a two-way trust . In two-way trusts, each domain treats the users from the trusted (and trusting) domain as its own users.

System Requirements

The following are the system requirements for NetDom:

Windows XP Professional

Files Required

Netdom.exe

Netdom.exe: Windows Domain Manager

Corresponding UI

Concepts

System Requirements

Files Required