Shulou(Shulou.com)06/03 Report--

Introduction to Microsoft Best Tools Kit

AccessChk

To ensure that a secure environment is created, Windows administrators often need to know what kind of access a particular user or group of users has to resources such as files, directories, registry keys, and Windows services. AccessChk is able to answer these questions quickly through an intuitive interface and output.

AccessEnum

This simple but powerful security tool shows you who can access directories, files, and registry entries on your system with what access rights. Use this tool to find permissions vulnerabilities.

AdExplorer

Active Directory Explorer is an advanced Active Directory (AD) viewer and editor.

AdInsight

An LDAP Lightweight Directory Access Protocol real-time monitoring tool designed to troubleshoot Active Directory client applications.

AdRestore

Recover deleted Server 2003 Active Directory objects.

Autologon

Skip password screen during login.

Autoruns

See which programs are configured to start automatically when the system boots and you log in. Autoruns also provides a complete list of registry and file locations where an application can configure autolaunch settings.

BgInfo

This fully configurable program automatically generates a desktop background that contains important information about the system's IP address, computer name, network adapter, and more.

BlueScreen

This screensaver not only accurately simulates the "blue screen," but also a reboot (complete CHKDSK) and works on Windows NT 4, Windows 2000, Windows XP, Server 2003 and Windows 9x.

CacheSet

CacheSet is a program that allows you to take advantage of the functionality provided by NT to control the working set size of the cache manager. It is compatible with all versions of NT.

ClockRes

Check the resolution of the system clock, i.e. the maximum resolution of the timer.

Contig

Do you want to quickly defragment files you use frequently? Use Contig to optimize individual files or create new files in series.

Coreinfo

Coreinfo is a new command-line utility that shows you the mapping between logical and physical processors, NUMA nodes and the slots they are in, and the cache allocated to each logical processor.

Ctrl2cap

A kernel-mode driver that demonstrates keyboard input filtering on keyboard class drivers to turn Caps-Lock into a control key. Filtering at this level allows you to transform and hide keys just before NT wants to "see" them. Ctrl2cap also shows how to use NtDisplayString() to print a message that initializes the blue screen.

DebugView

Sysinternals has another precedence program: this program intercepts device driver calls to DbgPrint and OutputDebugString generated by Win32 programs. It allows you to view and log debug session output on your local computer or over the Internet without using an active debugger.

Desktops

Use this new utility to create up to four virtual desktops, preview content on each desktop and easily switch between them using the taskbar interface or hotkeys.

Disk2vhd

Disk2vhd simplifies migration from physical systems to virtual machines (p2v).

DiskExt

Displays volume disk mappings.

Diskmon

This utility captures all hard disk activity or works like a software disk activity light in your system tray.

DiskView

Graphics Disk Sector Utility.

Disk Usage (DU)

View disk usage by catalog.

EFSDump

View information about encrypted files.

Handle

This easy-to-use command-line utility displays which processes have which files open, and much more.

Hex2dec

Convert hexadecimal numbers to decimal and vice versa.

junction

Create Win2K NTFS symbolic links.

LDMDump

Dumps the contents of Logical Disk Manager's database on disk, which describes the partitioning of Windows 2000 dynamic disks.

ListDLLs

Lists all currently loaded DLLs, including load location and version number. 2.0 Version prints the full pathname of the loaded module.

LiveKd

Check the real system using the Microsoft kernel debugger.

LoadOrder

View the order in which devices are loaded into WinNT/2000 systems.

LogonSessions

Lists the active login sessions in the system.

MoveFile

Allows you to schedule move and delete commands to be executed the next time the system restarts.

NTFSInfo

NTFSInfo allows you to view detailed information about NTFS volumes, including the size and location of the master file table MFT and MFT zones, as well as the size of NTFS metadata files.

PageDefrag

Defragment your paging files and registry hives.

PendMoves

Enumerates a list of file rename and delete commands to execute the next time the system boots.

PipeList

Displays named pipes on the system, including maximum and active instances of each pipe.

PortMon

Monitor serial and parallel port activity with advanced monitoring tools. It recognizes all standard serial and parallel IOCTLs and can even display parts of the data being sent and received. Version 3.x features powerful new UI enhancements and advanced filtering capabilities.

ProcDump

This new command-line utility is designed to capture process dumps that would otherwise be difficult to isolate and reproduce CPU spikes. The tool can also be used as a general utility for creating process dumps and can monitor and generate process dumps when processes have pending windows or unhandled exceptions.

Process Explorer

Find out what files, registry keys, and other objects are open by the process, and what DLLs are loaded. This incredibly powerful utility even shows the owner of each process.

Process Monitor

Monitor file system, registry, processes, threads, and DLL activity in real time.

ProcFeatures

This Mini programs reports processor and Windows support for Physical Address Extension and No Execution buffer overflow protection.

PsExec

Executes processes on remote systems.

PsFile

View files opened remotely.

PsGetSid

Displays the SID of the computer or user.

PsInfo

Get information about the system.

PsKill

Terminate local or remote processes.

PsList

Displays information about processes and threads.

PsLoggedOn

Displays users logged into a system.

PsLogList

Dump event logs.

PsPasswd

Change your account password.

PsService

View and control services.

PsShutdown

Shut down and restart your computer.

PsSuspend

Suspend and resume processes.

PsTools

The PsTools suite includes command-line programs that list processes running on local or remote computers, run processes remotely, restart computers, dump event logs, and perform other tasks.

RegDelNull

Scan and delete registry entries that contain embedded null characters. Standard registry editing tools cannot delete such registry entries.

RegJump

Skip to the registry path specified in Regedit.

RootkitRevealer

Scan systems for rootkit-based malware.

SDelete

Safely overwrite sensitive files and use this DoD-compliant safe deletion program to clean up the free space where previously deleted files were located.

ShareEnum

Scan file shares on the network and view their security settings to close security vulnerabilities.

ShellRunas

Start the program as another user via a convenient shell context menu item.

Sigcheck

Dump file version information and check if the image in the system is digitally signed.

Streams

Displays NTFS alternate data streams.

Strings

Searches for ANSI and UNICODE strings in binary images.

Sync

Flushes cached data to disk.

TCPView

Active socket command-line viewer.

VMMap

VMMap is a process virtual and physical memory analysis utility.

VolumeId

Set the volume ID of a FAT or NTFS drive.

Whois

View the owners of Internet addresses.

WinObj

Base Object Manager Namespace Viewer.

ZoomIt

Demonstration utility for zooming and drawing on screen.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.