The NTToolkit is a set of small and useful utilities designed to help network
administrators with their daily administrative tasks. The NTToolkit is freeware and
While the majority of tools are available for Windows, Linux/FreeBSD/OSX support for some utilties was
added with the release of version 2.0.
Added in Version 2.00:
IPMon+, IPMon & CheckDB are now available for Linux, FreeBSD & OS X.
IPMon+ is the GUI-version of IPMon (see below). Enhancements include the ability to see the amount of data transmitted between two endpoints, basic filtering and sorting capabilities as well as the ability to copy output to the clipboard.
IPMon is a command-line utility that utilizes the WinPcap network driver to monitor IP traffic to the local host for troubleshooting and monitoring purposes. Unlike full blown network sniffers, IPMon only shows the IP addresses and ports (for TCP/UDP) affected, and groups output so that repetitive traffic is not being displayed. For example, any IP address that communicates with the local host where IPMon runs is only displayed once.
ADSList analyzes one or more directories and lists any alternate data streams (aka as "hidden streams")
that are associated with a file. When an alternate data stream is found, the name of the stream is displayed
along with the regular file the stream is associated with.
NTPClient returns the current time as reported by a NTP server and calculates the local clock offset
based on RFC 1315 and RFC 2030. NTPClient supports the NTP (Network Time Protocol) up to version 3.
IsAdmin detects whether a user is a member of the local Administrators group, either through direct
membership in the Administrators group or through indirect membership through another group.
CheckDB verifies a database connection through ODBC to ensure that a connection to a database can be
established. You can optionally also run a single SQL statement after a successful connection has been
established. A connection can be specified either through a DSN (Data Source Name) or a connection
string. The output from CheckDB can either be displayed in the command line or logged to the event log.
CheckURL verifies availability of a web page and can also check for content inside the page and/or
verify the checksum of that page. CheckURL can also log its actions to the event log and supports
web-based authentication for password-protected web pages.
The Event Message Browser lets you view all available event messages that may be logged on your system.
You can simply select an event log (e.g. Application) and select one of the available event sources from that
log (e.g. ntbackup) and then review all the available Event IDs from that source. You can also use the Event
Message Browser to generate test messages in the event log.
Password Assistant is a GUI application that lets you update passwords of user
accounts on multiple Windows NT, Windows 2000 or Windows XP machines. A good
example is updating the Administrator password on all of your workstations.
You can obtain computer names to update from the network neighborhood
(with a filter option) or from a text file. The update process can also be logged to a
NetSend is an application with a graphical user interface that allows you to send a
text message to a remote Windows NT, Windows 2000 or Windows XP computer
that is running the Messenger service (activated by default).
Hardlink Shell Extension is an extension to the Windows shell. It allows you to create
hardlinks from within the explorer shell by right-clicking any file. A hard links is a file which
is linked to another file, but has a different name.
ServiceSecure allows you to easily reset service passwords by specifying the username
and password rather than having to manually configure services through the MMC. Changing the password
of a user account used by services is no longer a nightmare, simply use ServiceSecure in a batch
file and update all affected services in your entire network in a matter of moments.
TaskSecure allows you to easily manage the passwords stored in scheduled tasks on your
network. Simply specify the username and password and TaskSecure will reset the password stored
in all scheduled tasks (using the specified username) on the specified computer (local or remote).
You can use it in a batch file to update all scheduled tasks on your networks in a matter of moments.
Logoff Delay lets you log off a user in a specified amount of time. This can be useful
if you want to restrict the logon time of users.
GetHTTP is a command line application that allows you to retrieve files through the
HTTP protocol. Please note that SSL is not supported.
File Replace is a command line utility that parses a directory (including subdirectories)
and replaces multiple occurrances of one template file.
Super Delete is a command line utility that parses a directory (including subdirectories)
and delete multiple occurrances of one file.
CheckTCP is an command line application that can determine whether a TCP port on a host is
open. Additionally you can receive initial data sent from the remote host through an open TCP connection,
such as when connecting to most SMTP hosts.
CheckTCP can be used to quickly determine whether a certain TCP port is open and optionally display any
data sent by the remote host over the established connection. CheckTCP is not intended to be used as a
portscanner and does not have good performance for such use.
FPing (Fast Ping) is a command line substitution to the traditional ping.exe utility which ships with Windows.
While FPing only supports the most commonly used command-line parameters (less than ping.exe) it does perform
the network checks significantly faster than the traditional ping utility.
Sleep is a command line application to pause input for a specified amount of time. This is mainly useful
for batch files.
PageSNPP is a command line application that sends text messages to pagers through the SNPP protocol.
Uptime is a command line application that will show you the current uptime of your server or workstation.
SHAChecksum is a command line application that will show you the SHA-256 checksum of file.
Dirsize is a command line application that will show you the size of a directory and its subdirectories, including file statistics.
WakeOnLAN is a command line application that will send a "magic" packet to wake up computers with network cards that support the WakeOnLAN feature.
Dirmon (DirectoryMonitor) is a command line application that monitors a directory (optionally with sub directories) for file changes in real-time.