"Deployment Tools" (CDROM:\support\tools\deploy.cab)
	sysprep.exe	- Strips Security ID or SID when preparing disk images (ghosting)
	setupmgr.exe	- Utility used for creating Unattended Answer files.
	makebt32.exe / makeboot.exe - Makes 4 setup diskettes. \BOOTDISK\

Support Tools
	ClonePrincipal (clonepr.dll)
	Active Directory Object Manager (movetree.exe)

• Helps manage ACL settings. Same as security tab on Active Directory snap-in.
  

• enumprop.exe [options] "LDAP-PATH"
  
• Used to dump all properties on a directory service object.
  

• Report on Group Policies in effect for current user and computer. No granular information.
  

• domain local and global groups must be empty to move. Members would be moved to LostAndFound.
  
• To move computer accounts use netdom.exe to preserve "join information", otherwise the information will be moved to LostAndFound.
  

• Move computer accounts b/w domains in a forest, will retain permissions, computers must be online.
  
• will handle domains or trusts
  

• Reset passwords for trust relationships (can also be done in AD Domains and Trusts snap-in).
  
• Can move AD database and log files (cannot move SYSVOL, you must use dcpromo.exe).
  

• When performing an authoritive restore, can use to check version number.
  

• determine connection objects
  
• display replication topology
  

• Inheritance and replication of ACLs are working properly (when changing user permissions)?