Ntdsutil.exe is a command-line utility that enterprise and domain administrators can use to manage and repair Active Directory. It is a menu-driven tool designed for interactive use, but you can also run it by using scripting and automation.

To automate Ntdsutil, specify the commands you want to run on the command line as parameters to the Ntdsutil utility. To make parsing easier, each command or parameter is separated by a blank space, and multiple string parameters are enclosed in quotation marks.

For example, the following command demonstrates how Ntdsutil can be controlled through a script to return the list roles held by a domain controller: Note that the letters in each of the parameters are abbreviated forms of the actual commands found in the Ntdsutil utility. You can obtain the same result by using the unabbreviated form of each command, as in the following example: