ntdsutil snapshot activate instance ntds list all cteate list all mount {c4f9554b-e071-44dd-8ab3-723d44a7caa4}
dsamain -dbpath c:\$SNAP_202105291802_VOLUMEC$\Windows\NTDS\ntds.dit -ldapport 55555
连接服务后即可查看快照内容