Comments on: Active Directory Command Line One-Liners

By: Javi Rodrigue

Javi Rodrigue — Tue, 09 Mar 2010 13:15:15 +0000

very nice and Thank you!!!!!!!!

By: Donnie0526

Donnie0526 — Wed, 03 Mar 2010 22:32:49 +0000

GREAT STUFF!!!

Would love to have a separate RSS for just the CMD line articles/entries.

Definitely love the samples too. Rock on…

By: Rob Ingenthron

Rob Ingenthron — Tue, 24 Nov 2009 23:35:44 +0000

“Nasseer”, that’s just two ways of saying the same thing: if the account is disabled, it’s disabled. Sometimes, we will get requests that require us to exclude disabled users from the results, such as when we would need to license software based on the number of active users in AD. Or, if you were creating a mail list, there’s no sense in sending mail to user accounts that are disabled.

By: Nasseer

Nasseer — Fri, 31 Jul 2009 08:43:33 +0000

what is the difference between Disabled user accounts and User accounts that are disabled ?
and what command should i add to sort by cn

By: Rob Ingenthron

Rob Ingenthron — Tue, 14 Apr 2009 23:18:11 +0000

Here’s another way to list authorized DHCP servers in AD:

dsquery * “CN=NetServices,CN=Services,CN
=Configuration,DC=jnpr,DC=net” -filter “(objectClass=DHCPclass)”

The same command if your regular user ID has insufficient privileges, assuming you have a more privileged account for administrative work:
dsquery * “CN=NetServices,CN=Services,CN
=Configuration,DC=jnpr,DC=net” -filter “(objectClass=DHCPclass)” -u domain\UserID -p password

By: Rob Ingenthron

Rob Ingenthron — Tue, 14 Apr 2009 23:07:27 +0000

How about showing all DHCP servers in Active Directory:

First, you have to run the command “netsh add helper DHCPMON.DLL” to enable the DHCP management module from within NETSH (unless the DHCP server service is already installed locally).

Then you can enter “netsh dhcp show server” to view all Authorized DHCP servers in Active Directory.

By: Rob Ingenthron

Rob Ingenthron — Tue, 14 Apr 2009 23:02:04 +0000

Hey, here’s some more options for listing all of the domain controllers:

netdom query dc

nltest /dclist:jnpr

repadmin /viewlist *

dsquery * “cn=Configuration,DC=jnpr,DC=net” -filter “(objectClass=nTDSDSA)”

certutil -dcinfo

gpotool
(gpotool lists the DC’s, and then goes on to list GPO’s)

By: Jim Coyle

Jim Coyle — Wed, 26 Nov 2008 15:15:25 +0000

Thank you – very helpful

By: Rob Ingenthron

Rob Ingenthron — Thu, 04 Sep 2008 10:51:34 +0000

Your use of NTDSUTIL to list FSMO roles is interesting, but here’s an easier way:

netdom query fsmo

By: Azam

Azam — Fri, 15 Aug 2008 12:24:16 +0000

Very Informative…Thanks for Sharing