介紹

NLTEST to test the trust relationship between a workstation and domain

# List of domain trusts

nltest /trusted_domains

# 找出 mydomain 的 DC Server

PS C:\> nltest /dclist:mydomain

Get list of DCs in domain 'mydomain' from '\\ad02'.
    ad01.mydomain.local [PDC] [DS] Site: Default-First-Site-Name
    ad02.mydomain.local       [DS] Site: Default-First-Site-Name
The command completed successfully

# The workstation that is a member of the mydomain domain

# /sc_query: DomainName

# sc = secure channel (NetLogon service established)

# /server: ServerName

# Run nltest at a remote domain controller

nltest /server:ad01 /sc_query:mydomain

Flags: 30 HAS_IP  HAS_TIMESERV
Trusted DC Name \\ad02.mydomain.local
Trusted DC Connection Status Status = 0 0x0 NERR_Success
The command completed successfully

# Test DC can authenticate a user account - tim

nltest /whowill:mydomain tim

[10:56:30] Mail message 0 sent successfully (\MAILSLOT\NET\GETDC473)
[10:56:30] Response 0: S:ad02 D:mydomain A:tim (Act not found)
The command completed successfully