Last Updated on August 23, 2026
With the continuous evolution of Windows Server, Microsoft provides powerful command line utilities designed to make server and network administration easier. These commands are used to configure and repair the operating system and its core components. Many times the absolute only way to perform a certain task is directly through a command line interface.
Many people tend to be afraid of the command line initially. Once you get used to it, you will find it is a powerful tool that you will use all the time to automate your workflow. The availability of these commands might vary slightly depending on exactly what version of Windows Server you are running. Here is a comprehensive listing of the most essential commands and exactly what they do.
Network and Security Commands
1. arp.exe
The Address Resolution Protocol utility displays and modifies the IP-to-Physical address translation tables used by your network adapters. You can see exactly which MAC addresses are associated with active IP addresses on your local network. System administrators use this constantly to troubleshoot hidden IP conflicts and routing issues.
2. cmdkey.exe
This utility enables you to manage Stored Usernames and Passwords directly from the command prompt. It displays, creates, and deletes stored network credentials safely. This is highly useful when automating login scripts for remote file shares or application deployments.
3. gpresult.exe
This command displays the Resultant Set of Policy information for a target user and computer. It shows the exact effective group policy currently applied to a machine. Administrators rely on this to troubleshoot why specific security settings are failing to apply across the domain.
4. whoami.exe
This command displays the exact username and group membership information about the currently logged-on user. It can display the security identifier and all specific privileges assigned to your current session. It is the absolute fastest way to verify your active administrative rights.
File and Storage Commands
1. cipher.exe
Cipher is a command line tool that you can use to manage encrypted data on NTFS volumes. It works by utilizing the built-in Encrypting File System to secure your directories. You can also use it to securely wipe free disk space to prevent unauthorized data recovery.
2. defrag.exe
This tool is the command prompt equivalent of the graphical Disk Defragmenter utility. It does everything the GUI version does while fully supporting advanced scripting parameters. You can use this in a batch script to schedule heavy analysis and defragmentation of your storage servers during off hours.
3. diskpart.exe
This powerful utility enables you to manage disks, partitions, or volumes directly from the command prompt. You can type the commands at the prompt via interactive mode to format raw drives. You can also configure the tool to use a text script for completely automated storage provisioning.
4. fsutil.exe
You can use this tool to manage advanced FAT and NTFS file system properties from the command prompt. You can manage sparse files, configure reparse points, and mount new storage volumes. It also allows you to view the exact amount of free space remaining on a volume instantly.
5. robocopy.exe
Robust File Copy is the absolute standard for migrating massive amounts of data between Windows servers. It easily handles network interruptions and resumes copying exactly where it left off. It preserves all NTFS file permissions and timestamps during the transfer.
6. takeown.exe
This tool enables the administrator to instantly take ownership of a file or folder specified on the command line. It bypasses broken NTFS permissions that block you from accessing critical data. By default, it assigns full ownership to the specific user running the command.
7. icacls.exe
This command displays or modifies access control lists for files and folders. It completely replaces the older legacy tools for managing strict NTFS permissions. You can use it to backup and restore entire directory permission structures instantly.
Active Directory Commands
1. dsadd.exe
This Active Directory tool adds specific objects directly to your domain database. You can instantly add new computer, contact, group, organization unit, or user objects. It speeds up bulk user creation when combined with simple text files.
2. dsmod.exe
This command modifies the existing attributes of objects inside Active Directory. You can use it to modify computers, contacts, groups, servers, users, and partitions. It saves helpdesk workers massive amounts of time when updating corporate directory details.
3. dsget.exe
Administrators use this command to see the specific properties of objects in Active Directory. It outputs selected attributes of computers, contacts, groups, organizational units, or users. You input targeted objects into the command and it outputs a clean list of properties.
4. dsmove.exe
This utility moves a single Active Directory object to a brand new location within the exact same domain. It will also let you rename a single object without actually moving it. This keeps your organizational units clean and perfectly structured.
5. dsquery.exe
This tool enables you to query Active Directory for objects that match a highly specified criterion. This is incredibly useful if you need to search the entire domain for objects that share similar characteristics. You can pipe the results directly into other directory service commands.
6. rendom.exe
The Domain Rename tool allows you to rename your Active Directory domains across the entire forest. It allows you to restructure existing domains within a tree and create new trees entirely. You cannot add or remove domains from the forest with this specific tool.
System Management Commands
1. pnputil.exe
The Plug and Play Utility replaces older legacy tools for modern Windows Server environments. It allows administrators to manage the driver store, install new device drivers, and remove problematic hardware packages. It provides a level of detail that is simply not available in the standard Device Manager.
2. eventcreate.exe
This utility creates a custom event in a specified system event file. The valid targets are the Application and System logs. You must have local administrator access to use this utility to enter custom tracking entries into the logs.
3. wevtutil.exe
The Windows Event Command Line Utility is a modern tool used to retrieve information about event logs and publishers. You can use it to install event manifests, run queries, and clear out massive log files. It completely replaces older deprecated tools for deep event log management.
4. logman.exe
This command line utility manages and schedules background performance counters. You can also use it to manage and schedule complex event trace logs. You can execute this utility on a remote server provided you have the proper administrator credentials.
5. relog.exe
You can use this tool to extract data from performance counter logs and convert it to different formats like CSV or SQL. It is commonly used to extract logs to Excel spreadsheets for deep data analysis. You can also resample logs to create new ones based on a specific time period.
6. sfc.exe
The System File Checker is a command line tool used for initiating on-demand system integrity scans. It verifies the core contents of the Windows File Protection cache folder. It automatically replaces missing or corrupted operating system files with known good copies.
7. sigverif.exe
The File Signature Verification Tool scans the operating system for the presence of unsigned drivers and critical system files. It creates a detailed report that lists all the files scanned along with relevant digital signature information. The text report is stored securely in your main Windows directory.
8. sc.exe
The Service Control utility is used to communicate directly with background services and device drivers. You can use it to query the exact status of a service or change its startup type. It is essential for stopping frozen services that refuse to close through the graphical interface.
9. schtasks.exe
You use this tool to set external programs to run at specific scheduled intervals. It allows you to delete or change existing scheduled tasks directly from the prompt. You can also force a scheduled task to run immediately without waiting for its trigger.
10. setx.exe
You use this command to permanently configure environment variables for either a specific user or the entire system environment. You can set variables explicitly by specifying their exact value or using the contents of a registry key. It is the only way to permanently set a variable name via the command line so it survives a reboot.
11. shutdown.exe
Use this command to shut down or restart local or remote computers across your network. You can use the /i option to launch a graphical window to shut down several computers at once. It is perfect for scheduling automated weekend server reboots.
12. tasklist.exe
This utility shows all the active tasks and services currently running on the local or remote computer. It displays the exact memory usage and Process ID for every single application. This helps you identify exactly what software is consuming your server resources.
13. taskkill.exe
Use this command to forcefully terminate frozen processes on the local or remote computer. You need to use tasklist first to identify the exact Process ID that needs to be terminated. It has many powerful options and will instantly kill applications that refuse to close normally.
14. tracerpt.exe
This command line utility processes event trace logs and generates a detailed report. It parses the binary trace files and creates readable CSV or XML summaries. Performance engineers use this to analyze deep system bottlenecks.
15. systeminfo.exe
This utility displays detailed configuration information about a computer and its operating system. It lists the exact OS build, registered owner, installed hotfixes, and physical RAM details. It is the perfect command for gathering quick server inventory data.
Check out our articles on the 5 essential network commands and 5 essential PowerShell network commands to improve your overall networking skills.
For additional training resources, check out our online IT training courses.
Check out our extensive IT book series.
