How To Browse NTDS.DIT Offline

In Windows Server 2008, you can mount the backup image and then load it using the DSAMIN command line utility to browse the data offline. This is how you do to browse the Active Directory data offline:


Type the following commands in a sequence

  • Ntdsutil snapshot at command prompt
  • List All
  • Mount 1
  • Open another command prompt, type:

dsamin -dbpath C:\$SNAP__VOLUMEC$\Windows\NTDS\ntds.dit -ldapport 5000

  • Launch LDP.exe
  • Click Connection > Connect
  • Change the Port to 5000 and Click Ok
  • Click View > Tree


About The Author

Leave a Comment

Your email address will not be published. Required fields are marked *

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

Scroll to Top