Updated: March 28, 2003
Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2
This command-line tool helps perform network administrative tasks. You can use NLTest to:
Get a list of domain controllers.
Force a remote shutdown.
Query the status of trust.
Test trust relationships and the state of domain controller replication in a Windows domain.
Force a user-account database to synchronize on Windows NT version 4.0 or earlier domain controllers.
NLTest can test and reset the secure channel established by the NetLogon service. This secure channel is established between clients and the domain controller that logs them on. NLTest does not work for clients using Kerberos for authentication since this secure channel is not used with Kerberos.
You must run NLTest from the command window.
There is no corresponding user interface for this tool.
A discrete communication channel, known as the secure channel, exists between trusted domains in a Windows NT 4.0 environment and parent domains and their immediate children in an Active Directory environment. In a Windows NT 4.0 environment these channels are also used to authenticate user accounts when a remote user connects to a network resource and the user account exists in a trusted domain. This is called pass-through authentication.
This tool provides diagnostic features that are useful for troubleshooting Windows Server 2003 operating system configurations. However, because this tool has been designed primarily for system administrators and support personnel, its output may be difficult to analyze. In this case, you should review the appropriate troubleshooting sections in the Windows Deployment and Resource Kits. Search for any of the keywords from the bulleted list in the tool description above.
The following are the system requirements for NLTest:
Windows Server 2003 or Windows XP Professional