10000 Usage: nltest [/OPTIONS]\n\n\n /SERVER:<ServerName> - Specify <ServerName>\n\n /QUERY - Query <ServerName> netlogon service\n /REPL - Force partial sync on <ServerName> BDC\n /SYNC - Force full sync on <ServerName> BDC\n /PDC_REPL - Force UAS change message from <ServerName> PDC\n\n /SC_QUERY:<DomainName> - Query secure channel for <Domain> on <ServerName>\n /SC_RESET:<DomainName>[\<DcName>] - Reset secure channel for <Domain> on <ServerName> to <DcName>\n /SC_VERIFY:<DomainName> - Verify secure channel for <Domain> on <ServerName>\n /SC_CHANGE_PWD:<DomainName> - Change a secure channel password for <Domain> on <ServerName>\n /DCLIST:<DomainName> - Get list of DC's for <DomainName>\n /DCNAME:<DomainName> - Get the PDC name for <DomainName>\n /DSGETDC:<DomainName> - Call DsGetDcName /PDC /DS /DSP /GC /KDC\n /TIMESERV /GTIMESERV /NETBIOS /DNS /IP /FORCE /WRITABLE /AVOIDSELF /LDAPONLY /BACKG /DS_6 /TRY_NEXT_CLOSEST_SITE\n /SITE:<SiteName> /ACCOUNT:<AccountName> /RET_DNS /RET_NETBIOS\n /DNSGETDC:<DomainName> - Call DsGetDcOpen/Next/Close /PDC /GC\n /KDC /WRITABLE /LDAPONLY /FORCE /SITESPEC\n /DSGETFTI:<DomainName> - Call DsGetForestTrustInformation\n /UPDATE_TDO\n /DSGETSITE - Call DsGetSiteName\n /DSGETSITECOV - Call DsGetDcSiteCoverage\n /DSADDRESSTOSITE:[MachineName] - Call DsAddressToSiteNamesEx\n /ADDRESSES:<Address1,Address2,...>\n /PARENTDOMAIN - Get the name of the parent domain of this machine\n /WHOWILL:<Domain>* <User> [<Iteration>] - See if <Domain> will log on <User>\n /FINDUSER:<User> - See which trusted domain will log on <User>\n /TRANSPORT_NOTIFY - Notify netlogon of new transport\n\n /DBFLAG:<HexFlags> - New debug flag\n\n /USER:<UserName> - Query User info on <ServerName>\n\n /TIME:<Hex LSL> <Hex MSL> - Convert NT GMT time to ascii\n /LOGON_QUERY - Query number of cumulative logon attempts\n /DOMAIN_TRUSTS - Query domain trusts on <ServerName>\n /PRIMARY /FOREST /DIRECT_OUT /DIRECT_IN /ALL_TRUSTS /V\n /DSREGDNS - Force registration of all DC-specific DNS records\n /DSDEREGDNS:<DnsHostName> - Deregister DC-specific DNS records for specified DC\n /DOM:<DnsDomainName> /DOMGUID:<DomainGuid> /DSAGUID:<DsaGuid>\n /DSQUERYDNS - Query the status of the last update for all DC-specific DNS records\n\n /BDC_QUERY:<DomainName> - Query replication status of BDCs for <DomainName>\n\n /LIST_DELTAS:<FileName> - display the content of given change log file \n\n /CDIGEST:<Message> /DOMAIN:<DomainName> - Get client digest\n /SDIGEST:<Message> /RID:<RID in hex> - Get server digest\n\n /SHUTDOWN:<Reason> [<Seconds>] - Shutdown <ServerName> for <Reason>\n /SHUTDOWN_ABORT - Abort a system shutdown\n\n
10001 (null)\n
10002 Invalid 0x%lX\n
10003 %wZ\n
10004 Can't convert time from GMT to Local time\n
10005 \n*** Assertion failed: %hs%hs\n*** Source File: %hs, line %ld\n\n
10006 Cannot read mailslot (%hs) : %ld\n
10007 Can't successfully wait post event %ld\n
10008 Can't successfully wait for multiple objects %ld\n
10009 Invalid WaitStatus returned %ld\n
10010 can't read overlapped response %ld
10011 Response %ld:
10012 Failure parsing response:
10013 Response not for correct User name %ws s.b. %ws\n
10014 S:%ws D:%ws A:%ws
10015 (Act found)\n
10016 (Act not found)\n
10017 (netlogon paused)\n
10018 (Unknown opcode: %lx)\n
10019 Tree: %ws\n
10020 Dom: %ws\n
10021 Host: %ws\n
10022 Flags: 0x%lx\n
10023 Didn't receive a response for mail message %ld (%hs)\n
10024 Invalid Netbios domain or server name '%ws' specified (too long)\n
10025 Iterations set to 64, maximum supported\n
10026 Cannot initialize global print critical section\n
10027 Can't GetComputerName\n
10028 Cannot create temp mailslot %ld\n
10029 Cannot set mailslot info %ld\n
10030 Can't create post event %ld \n
10031 Can't create response thread %ld\n
10032 Can't allocate mailslot message %ld\n
10033 Cannot write netlogon mailslot: %ld\n
10034 Can't set post event %ld \n
10035 Can't wait for single object %ld\n
10036 Can't stop response thread (TIMEOUT) \n
10037 Can't stop response thread %ld \n
10038 Mail message %ld sent successfully (%hs) \n
10039 Cannot open key to change DACL %hs subkey %hs
10040 Cannot get key security for %hs subkey %hs
10041 Security descriptor size is too big\n
10042 Cannot allocate and initialize sid
10043 Cannot get security descriptor DACL for %hs subkey %hs
10044 DACL is not present for %hs subkey %hs
10045 Cannot get ACL information for %hs subkey %hs
10046 Cannot get ACE %ld for %hs subkey %hs
10047 No Administrators Ace for %hs subkey %hs\n
10048 Cannot set key security for %hs subkey %hs
10049 Cannot open key following DACL change for %hs subkey %hs
10050 Cannot RegSetKeySecurity to restore %hs subkey %hs
10051 Cannot connect to registy on %ws
10052 Cannot open %hs:
10053 Cannot query %hs:
10054 Cannot set %hs:
10060 Variable data desc %ld not in variable value.\n
10061 Variable data item %ld not in variable value.\n
10062 Offset: %ld Length: %ld Size: %ld\n
10063 Cannot decrypt LM password:
10064 Cannot decrypt NT password:
10065 %hs set to %hs\n
10066 Open Service Control Manager failed:
10067 Opening service [%ws] failed:
10068 Enumeration of dependent services [Stop %ws] failed:
10069 Control of service [Stop %ws] failed:
10070 %ws service is stopping
10071 \nQuery of service status [%ws] failed:
10072 %ws service failed to stop\n
10073 Cannot find DC to get DC list from.
10074 Domain '%ws' is pre Windows 2000 domain. (Using NetServerEnum).\n
10075 Get list of DCs in domain '%ws' from '%ws'.\n
10076 You don't have access to DsBind to %ws (%ws) (Trying NetServerEnum).\n
10077 Cannot DsBind to %ws (%ws).
10078 Cannot call DsGetDomainControllerInfoW to %ws (%ws).
10079 Site: %ws
10080 Memory allocation failed for %ws\n
10081 WSAStringToAddressA failed for address %hs.
10082 WSAAddressToStringA failed.
10083 Unable to get addresses for %hs.
10084 Unable to get addresses for local machine.
10085 Cannot initialize winsock:
10086 Getting DC name failed:
10087 Address to Site names translation failed:
10088 \nGet the site-subnet mapping for '%hs' from '%hs'.\n
10089 \nGet the site-subnet mapping for local machine from '%hs'.\n
10090 \nGet the site-subnet mapping from '%hs'.\n
10091 Failed to acquire cryptographic CSP (error=%lu)\n
10092 Not enough memory\n
10093 Second argument to /SHUTDOWN: must be a number.\n\n
10094 Invalid server name\n
10095 I_NetLogonControl failed:
10096 Flags: %lx
10097 Connection
10098 There was a failure in the last update for one of the DC-specific DNS records\n
10099 There was no failure in the last update for all DC-specific DNS records\n
10100 Domain Name: %ws\n
10101 Trusted DC Name %ws \n
10102 Trusted DC Connection Status
10103 Trust Verification
10104 Number of attempted logons: %ld\n
10105 Calculation of NtOwf of password failed: 0x%lx
10106 NT OWF Password for: %hs
10107 LM OWF Password for: %hs
10108 ----- Password doesn't translate from unicode ----\n
10109 NT OWF Password encrypted by: 0x%lx
10110 LM OWF Password encrypted by: 0x%lx
10111 Encrypting NtOwf with index returns 0x%lx\n
10112 NetGetDCName failed:
10113 PDC for Domain %ws is %ws\n
10114 DC: %ws\n
10115 Address: %ws\n
10116 Dom Guid: %ws\n
10117 Dom Name: %ws\n
10118 Forest Name: %ws\n
10119 Dc Site Name: %ws\n
10120 Our Site Name: %ws\n
10121 Flags:
10122 NDNC
10123 PDC
10124 GC
10125 DS
10126 LDAP
10127 KDC
10128 TIMESERV
10129 GTIMESERV
10130 WRITABLE
10131 DNS_DC
10132 DNS_DOMAIN
10133 DNS_FOREST
10134 CLOSE_SITE
10135 PARTIAL_SECRET
10136 FULL_SECRET
10137 Geting forest trust information failed:
10138 TLN: %wZ\n
10139 Dom: %wZ (%wZ)\n
10140 Invalid Type: %ld\n
10141 I_NetGetDCList failed:
10142 List of DCs in Domain %ws\n
10143 %wZ
10144 NULL
10145 (PDC)
10146 Server : %ws\n
10147 I_NetLogonControl failed:
10148 SyncState :
10149 IN_SYNC \n
10150 REPLICATION_IN_PROGRESS \n
10151 REPLICATION_NEEDED \n
10152 UNKNOWN \n
10153 Connection State :
10154 Initiating system shutdown failed:
10155 AbortSystemShutdown failed:
10156 Enumerating domain trusts failed:
10157 List of domain trusts:\n
10158 Getting DC site coverage failed:
10159 Getting parent domain failed:
10160 ERROR: Invalid Domain GUID specified\n
10161 ERROR: Invalid DSA GUID specified\n
10162 Deregisterring DNS host records failed:
10164 Starting DC enumeration failed:
10165 List of DCs in pseudo-random order taking into account SRV priorities and weights:\n
10166 Site specific:\n
10167 Non-Site specific:\n
10168 WARNING: No records available of specified type\n
10169 ERROR: DNS server failure:
10170 ERROR: DNS query indicates that IP is not configured on this machine\n
10171 ERROR: DNS query failure:
10172 Getting trust RID failed:
10173 Computing client digest failed:
10174 Computing server digest failed:
10175 Account RID: 0x%lx\n
10176 New digest:
10177 Old digest:
10178 The command completed successfully\n
10179 /BP - Force a BreakPoint in Netlogon on <ServerName>\n /TRUNC - Truncate log file (rename to *.bak)\n /UNLOAD - Unload netlogon.dll from lsass.exe\n /PWD:<CleartextPassword> - Specify Password to encrypt\n /RID:<HexRid> - RID to encrypt Password with\n\n
