TABLE A: Command-Line Tools for AD Queries
Tool	Source	Use
Dsadd.exe	Windows Server 2003 Administration Tools	Adds objects.
Dsget.exe	Windows Server 2003 Administration Tools	Displays objects.
Dsmod.exe	Windows Server 2003 Administration Tools	Modifies objects.
Dsmove.exe	Windows Server 2003 Administration Tools	Moves objects.
Dsquery.exe	Windows Server 2003 Administration Tools	Finds objects by criteria.
Dsrm.exe	Windows Server 2003 Administration Tools	Deletes objects. (Warning! This one is potentially hazardous; use with care.)
Csvde.exe	Win2K Server	Imports data to and exports data from AD.
Gpresult.exe	Microsoft Windows 2000 Resource Kit	Captures Group Policy Object (GPO) Resultant Set of Policies (RSoP) information.
Search.vbs	Win2K Support Tools	Searches for objects by using search and scope criteria.
ADfind.exe	http://www.joeware.net	Similar to Search.vbs but offers additional search functionality.
GetADCount.exe	http://www.joeware.net	Counts the number of objects in AD.
MemberOf.exe	http://www.joeware.net	Enumerates user group memberships in AD.
SecData.exe	http://www.joeware.net	Dumps specific security data about an ID.
UserName.exe	http://www.joeware.net	Returns username information in several formats.
NetPWAge.exe	http://www.systemtools.com	Displays the age of the password for user and computer accounts; identifies possible unused or obsolete accounts.