configurable settings

Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2008

Aids in modifying the time to live (TTL) of dynamic data that is stored in Active Directory Domain Services (AD DS). At the configurable setting: prompt, type any of the parameters listed under Syntax.

This is a subcommand of Ntdsutil and Dsmgmt. Ntdsutil and Dsmgmt are command-line tools that are built into Windows Server 2008 and Windows Server 2008 R2. Ntdsutil is available if you have the AD DS or Active Directory Lightweight Directory Services (AD LDS) server role installed. Dsmgmt is available if you have the AD LDS server role installed. These tools are also available if you install the Active Directory Domain Services Tools that are part of the Remote Server Administration Tools (RSAT). For more information, see How to Administer Microsoft Windows Client and Server Computers Locally and Remotely (

To use either of these tools, you must run them from an elevated command prompt. To open an elevated command prompt, click Start, right-click Command Prompt, and then click Run as administrator.

For examples of how to use this command, see Examples.


{cancel changes | commit changes} {list | set %s1 to %s2 | show values}


Parameter Description

cancel changes

Cancels the changes that are made but not yet committed.

commit changes

Commits the changes made to the server.


Invokes the server connections submenu. See “Remarks” later in this topic for more information.


Lists the names of the supported configurable settings.

set %s1 to %s2

Sets the configurable settings %s1 to the value %s2.

show values

Displays values of configurable settings.


An alphanumeric variable, such as a domain or domain controller name.


Takes you back to the previous menu, or exits the utility.


Displays Help at the command prompt.


Displays Help at the command prompt.


  • Before you can run other configurable settings subcommand parameters, you need to connect to a specific AD DS or AD LDS instance by using the connections parameter.

  • Ntdsutil does not correctly handle special characters, such as the apostrophe character ('), that you can enter at the ntdsutil: prompt at the command line. In some situations, there may be an alternative workaround. For more information, see local roles (


To change the value of a configurable setting named DynamicObjectDefaultTTL to 172800 seconds (two days), type the following command, and then press ENTER:

Configurable setting: set DynamicObjectDefaultTTL to 172800

To show the current values of configurable settings, type the following command, and then press ENTER:

Configurable setting: show values

Additional references

Command-Line Syntax Key



authoritative restore

DS behavior


group membership evaluation


LDAP policies

local roles

metadata cleanup

partition management


security account management

semantic database analysis

set DSRM password