netdom

Netdom is a command-line tool that enables administrators to manage Active Directory (AD) domains and trust relationships from the command line. It's available if you have the Active Directory Domain Services (AD DS) server role installed. It's also available if you install the AD DS tools that are part of the Remote Server Administration Tools (RSAT). To learn more, see How to Administer Microsoft Windows Client and Server Computers Locally and Remotely. You must run the netdom command from an elevated command prompt. The netdom allows you to performing the following actions: - Add a device to a domain: - This process involves creating a computer account in the domain's directory. The computer and the domain exchange security credentials, allowing the domain to authenticate and authorize the computer. - You can also remove query, and move an existing computer account for a member workstation from one domain to another while maintaining the security descriptor on the computer account. - Manage computer accounts for domain member workstations and member servers: - Computer accounts in a domain are similar to user accounts but represent computers. Managing these accounts involves making sure they're correctly configured and secure. It includes activities such as renaming the computer within the domain or updating its credentials to maintain its ability to communicate securely with the domain controllers. - Establish one-way or two-way trust relationships between domains: - A one-way trust means that one domain trusts the users from another domain but not vice versa. - A two-way trust allows mutual access. - Trusts can be transitive, meaning they extend beyond two domains, or non-transitive, limited to the direct trust link. This is crucial for organizations with multiple domain environments to manage resources and user access efficiently. - Verifies or resets the secure channel: - A secure channel is a communication link established between a computer and a domain controller for exchanging authentication information. This channel needs to remain secure to protect sensitive data. - If the secure channel becomes disrupted, a verification checks its status. If issues are detected, resetting the channel re-establishes this secure communication link by updating credentials and ensuring the computer can authenticate with the domain controller again. …

netdom [ ADD | COMPUTERNAME | HELP | JOIN | MOVE | MOVENT4BDC | QUERY | REMOVE | RENAMECOMPUTER | RESET | RESETPWD | TRUST | VERIFY ]