Comando listar usuarios de um grupo AD

dsquery group -name "NOME_DO_GRUPO_NO_AD" | dsget group -members -expand | dsget user -fn -ln -samid


dsquery user -name * -limit 2000 | dsget user -samid > c:\teste.txt


DSQUERY USER -name * ou=UBV,dc=ad,dc=dom | DSGET USER -samid -display

Comando tornar proprietário do arquivo (Take owner ship):

takeown /f "<diretorio> ou <arquivo>" /R /A

Comando alterar permissão, incluir usuário ou grupo com full control:

icacls "<diretorio>\*" /grant "Domain Admins":F /T /Q

How to Fix Corrupt Windows 7 Profile - Logged in as Temp

Instructions


1 - Restart your PC to release the locks on your profiles.


2 - Log on with another administrative account.


3 - Delete C:\Users\%username%


4 - Delete C:\Users\TEMP


5 - Delete the registry key matching your SID from
"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsNT\CurrentVersion\ProfileList". Check the value "ProfileImagePath" to make sure you pick your own profile.


6 - Restart once again and then you're done!


Read more: How to Fix Corrupt Windows 7 Profile - Logged in as Temp | eHow.com http://www.ehow.com/how_5327984_fix-windows-profile-logged-temp.html#ixzz1JVWcbJWb

AD lingering objects - Event ID:1988

Comando para reparar problema com  lingering objects no AD.


repadmin /removelingeringobjects servidor.empresa.com 25844c3a-2992-4594-9361-126862365e5e DC=empresa,DC=com /advisory_mode


servidor.empresa.com -> Source, DC onde estão os lingering objects
25844c3a-2... -> Target, DC onde apresentou erros no event viewer
/advisory_mode - > Não efetiva o comando, apenas testa.


Referencias:
http://support.microsoft.com/?id=314282
http://support.microsoft.com/kb/870695