PDFTroubleshooting a multiprotocol configuration
Service commands for troubleshooting a multiprotocol configuration
The following service commands are useful for troubleshooting access issues in a multiprotocol configuration. For detailed information about the service commands, see the Service Commands Technical Notes.
|
Use case
|
Service command
|
|---|---|
|
Obtain information about network connectivity to domain controllers as well as access rights, credentials, access logs, and so forth.
|
server_cifssupport
|
|
Audit the current connection between the SMB client and domain controller.
|
svc_cifssupport -builtinclient
|
|
Run an internal test to hep find the root cause of potential configuration or environmental errors.
|
svc_cifssupport -checkup
|
|
Troubleshoot user access control by listing list user credentials as seen from the SMB server cache.
|
svc_cifssupport -cred
|
|
Obtain information on the global policy objects applied to the SMB server.
|
svc_cifssupport -gpo
|
|
Enable a log of user or machine logon attempts.
|
svc_cifssupport -logontrace
|
|
Check the authentication of a given user to an SMB server.
|
svc_cifssupport -lsarpc
|
|
Tests the network logon to an SMB server.
|
svc_cifssupport -nltest
|
|
Display domain controller information for a given SMB server.
|
svc_cifssupport -pdcdump
|
|
Attempt to connect to the SMB domain controller from a given SMB server.
|
svc_cifssupport -pingdc
|
|
Obtain the group membership of a given user from the SMB domain controller.
|
svc_cifssupport -samr
|
|
Access the Secure Mapping database, which acts as a cache mechanism to relate Windows SIDs to Unix UIDs.
|
svc_cifssupport -secmap
|