The Nltest.exe Command Line Tool

  • Article

Updated: May 24, 2010

Applies To: Windows Server 2008 R2

You use the Nltest.exe command line tool to display information about Active Directory Domain Services (AD DS).

The following is an example of the output from the nltest /dsgetdc: /force command on the DirectAccess client in the DirectAccess test lab (https://go.microsoft.com/fwlink/?Linkid=150613).

           DC: \\DC1.corp.contoso.com
      Address: \\2002:836b:2:1:0:5efe:10.0.0.1
     Dom Guid: e8bae90e-02c4-4489-8abd-e63353fed05a
     Dom Name: corp.contoso.com
  Forest Name: corp.contoso.com
 Dc Site Name: Default-First-Site-Name
        Flags: PDC GC DS LDAP KDC TIMESERV GTIMESERV WRITABLE DNS_DC DNS_DOMAIN
DNS_FOREST FULL_SECRET WS
The command completed successfully

You use the Nltest.exe command line tool (the nltest /dsgetdc: /force command) for DirectAccess troubleshooting to determine whether DirectAccess clients, DirectAccess servers, and intranet resources can locate and contact domain controllers for Internet Protocol security (IPsec) authentication.