{"id":52323,"date":"2009-10-05T03:01:00","date_gmt":"2009-10-05T03:01:00","guid":{"rendered":"https:\/\/blogs.technet.microsoft.com\/heyscriptingguy\/2009\/10\/05\/hey-scripting-guy-how-can-i-get-a-list-of-domain-controllers-in-my-domain-part-1\/"},"modified":"2009-10-05T03:01:00","modified_gmt":"2009-10-05T03:01:00","slug":"hey-scripting-guy-how-can-i-get-a-list-of-domain-controllers-in-my-domain-part-1","status":"publish","type":"post","link":"https:\/\/devblogs.microsoft.com\/scripting\/hey-scripting-guy-how-can-i-get-a-list-of-domain-controllers-in-my-domain-part-1\/","title":{"rendered":"Hey, Scripting Guy! How Can I Get a List of Domain Controllers in My Domain? (Part 1)"},"content":{"rendered":"

\"Bookmark<\/a> <\/p>\n

\"Hey,<\/p>\n

Hey, Scripting Guy! I hope you do not think I am clueless, but I need to obtain a list of all the domain controllers in my domain. Can you help me out by writing a Windows PowerShell script to list all of the domain controllers in my domain?<\/p>\n

<<\/p>\n

p style=”MARGIN: 0in 0in 8pt” class=”MsoNormal”>– KH<\/p>\n

\"Hey,<\/p>\n

Hello KH, <\/p>\n

Microsoft Scripting Guy Ed Wilson here. Fall has come to Charlotte, North Carolina, in the United States. This morning it was 60 degrees Fahrenheit (15.5 degrees Celsius) (I determined this by using my temperature conversion HTA<\/font><\/a>). The skies are blue, and the leaves are rustling around on the ground. It is my favorite time of the year. Couple this with the fact I was on vacation last week (I attended a wood working class in the Great Smoky Mountains<\/font><\/a>), and I am feeling relaxed and susceptible to suggestion. I most certainly do not think you are clueless. In fact, I have heard this question before. <\/p>\n

Sometime ago, the Scripting Guys wrote a script in VBScript that listed domain controllers by querying the schema configuration container. The How Can I Get a List of All the Domain Controllers in My Domain?<\/font><\/a> article was a huge success, with calls from all the major news services for permission for reprints (if you count our moms as major news services). The FindDomainControllersFromNamingContext.vbs script from the Hey Scripting Guy! article is seen here. <\/p>\n

FindDomainControllersFromNamingContext.vbs<\/strong><\/p>\n

On Error Resume Next<\/p>\n

Const ADS_SCOPE_SUBTREE = 2<\/p>\n

Set objRootDSE = GetObject(“LDAP:\/\/RootDSE”)
strConfigurationNC = objRootDSE.Get(“configurationNamingContext”)<\/p>\n

Set objConnection = CreateObject(“ADODB.Connection”)
Set objCommand =   <\/span>CreateObject(“ADODB.Command”)
objConnection.Provider = “ADsDSOObject”
objConnection.Open “Active Directory Provider”
Set objCommand.ActiveConnection = objConnection<\/p>\n

objCommand.Properties(“Page Size”) = 1000
objCommand.Properties(“Searchscope”) = ADS_SCOPE_SUBTREE <\/p>\n

objCommand.CommandText = _
    <\/span>“SELECT ADsPath FROM ‘LDAP:\/\/” & strConfigurationNC & “‘ WHERE objectClass=’nTDSDSA'”  <\/span>
Set objRecordSet = objCommand.Execute<\/p>\n

objRecordSet.MoveFirst
Do Until objRecordSet.EOF
    <\/span>Set objParent = GetObject(GetObject(objRecordset.Fields(“ADsPath”)).Parent)
    <\/span>WScript.Echo objParent.CN
    <\/span>objRecordSet.MoveNext
Loop<\/p>\n

<\/font><\/font><\/span><\/p>\n

The FindDomainControllersFromSchema.vbs script uses ADO to query the configurationNamingContext<\/b> from Active Directory. The same technique can be done using Windows PowerShell. The technique of using the configurationNamingContext<\/b> is illustrated in the FindDomainControllerFromNamingContext.ps1 script seen here. <\/p>\n

FindDomainControllerFromNamingContext.ps1<\/strong><\/p>\n

$Config = ([adsi]”LDAP:\/\/rootdse”).ConfigurationNamingContext
$dse = [adsi]”LDAP:\/\/$config”
$searcher = New-Object DirectoryServices.DirectorySearcher ($dse, “ObjectClass=nTDSDSA”)
$searcher.findall() |
ForEach-Object{ ([adsi]$_.path).parent }<\/p>\n

<\/font><\/font><\/span><\/p>\n

The first thing that is done in the FindDomainControllerFromNamingContext.ps1 script is retrieve the ConfigurationNamingContext<\/b>. To do this, the ADSI type accelerator is used to retrieve the rootdse from the LDAP provider. When the ADSI type accelerator is used to retrieve the rootdse from the LDAP provider, an instance of the DirectoryServices.DirectoryEntry<\/b> class is returned. As seen here, the DirectoryEntry<\/b> object for the rootdse has the ConfigurationNamingContext<\/b> property: <\/p>\n

PS C:> [adsi]”LDAP:\/\/rootdse”<\/p>\n


distinguishedName : {}
Path              <\/span>: LDAP:\/\/rootdse<\/p>\n

PS C:> [adsi]”LDAP:\/\/rootdse” | Get-Member<\/p>\n


   <\/span>TypeName: System.DirectoryServices.DirectoryEntry<\/p>\n

Name                          <\/span>MemberType Definition
—-                          <\/span>———- ———-
ConvertDNWithBinaryToString   <\/span>CodeMethod static string ConvertDNWithBinaryToStrin…
ConvertLargeIntegerToInt64    <\/span>CodeMethod static long ConvertLargeIntegerToInt64(p…
configurationNamingContext    <\/span>Property   <\/span>System.DirectoryServices.PropertyValueCo…
currentTime                   <\/span>Property   <\/span>System.DirectoryServices.PropertyValueCo…
defaultNamingContext          <\/span>Property   <\/span>System.DirectoryServices.PropertyValueCo…
dnsHostName                   <\/span>Property   <\/span>System.DirectoryServices.PropertyValueCo…
domainControllerFunctionality Property   <\/span>System.DirectoryServices.PropertyValueCo…
domainFunctionality           <\/span>Property   <\/span>System.DirectoryServices.PropertyValueCo…
dsServiceName                 <\/span>Property   <\/span>System.DirectoryServices.PropertyValueCo…
forestFunctionality           <\/span>Property   <\/span>System.DirectoryServices.PropertyValueCo…
highestCommittedUSN           <\/span>Property   <\/span>System.DirectoryServices.PropertyValueCo…
isGlobalCatalogReady          <\/span>Property   <\/span>System.DirectoryServices.PropertyValueCo…
isSynchronized                <\/span>Property   <\/span>System.DirectoryServices.PropertyValueCo…
ldapServiceName               <\/span>Property   <\/span>System.DirectoryServices.PropertyValueCo…
namingContexts                <\/span>Property   <\/span>System.DirectoryServices.PropertyValueCo…
rootDomainNamingContext       <\/span>Property   <\/span>System.DirectoryServices.PropertyValueCo…
schemaNamingContext           <\/span>Property   <\/span>System.DirectoryServices.PropertyValueCo…
serverName                    <\/span>Property   <\/span>System.DirectoryServices.PropertyValueCo…
subschemaSubentry             <\/span>Property   <\/span>System.DirectoryServices.PropertyValueCo…
supportedCapabilities         <\/span>Property   <\/span>System.DirectoryServices.PropertyValueCo…
supportedControl              <\/span>Property   <\/span>System.DirectoryServices.PropertyValueCo…
supportedLDAPPolicies         <\/span>Property   <\/span>System.DirectoryServices.PropertyValueCo…
supportedLDAPVersion          <\/span>Property   <\/span>System.DirectoryServices.PropertyValueCo…
supportedSASLMechanisms       <\/span>Property   <\/span>System.DirectoryServices.PropertyValueCo…<\/p>\n

<\/font><\/span><\/p>\n

When the ConfigurationNamingContext<\/b> property is queried, a string is returned. This is shown here:<\/p>\n

PS C:><\/p>\n

<\/font><\/span><\/p>\n

 <\/p>\n

PS C:> ([adsi]”LDAP:\/\/rootdse”).ConfigurationNamingContext
CN=Configuration,DC=NWTraders,DC=Com
PS C:> ([adsi]”LDAP:\/\/rootdse”).ConfigurationNamingContext | Get-Member<\/p>\n


   <\/span>TypeName: System.String<\/p>\n

Name             <\/span>MemberType            <\/span>Definition
—-             <\/span>———-            <\/span>———-
Clone            <\/span>Method                <\/span>System.Object Clone()
CompareTo        <\/span>Method                <\/span>int CompareTo(System.Object value), int Co…
Contains         <\/span>Method                <\/span>bool Contains(string value)
CopyTo           <\/span>Method                <\/span>System.Void CopyTo(int sourceIndex, char[]…
EndsWith         <\/span>Method                <\/span>bool EndsWith(string value), bool EndsWith…
Equals           <\/span>Method                <\/span>bool Equals(System.Object obj), bool Equal…
GetEnumerator    <\/span>Method                <\/span>System.CharEnumerator GetEnumerator()
GetHashCode      <\/span>Method                <\/span>int GetHashCode()
GetType         <\/span> <\/span>Method                <\/span>type GetType()
GetTypeCode      <\/span>Method                <\/span>System.TypeCode GetTypeCode()
IndexOf          <\/span>Method                <\/span>int IndexOf(char value), int IndexOf(char …
IndexOfAny       <\/span>Method                <\/span>int IndexOfAny(char[] anyOf), int IndexOfA…
Insert           <\/span>Method                <\/span>string Insert(int startIndex, string value)
IsNormalized     <\/span>Method                <\/span>bool IsNormalized(), bool IsNormalized(Sys…
LastIndexOf      <\/span>Method                <\/span>int LastIndexOf(char value), int LastIndex…
LastIndexOfAny   <\/span>Method                <\/span>int LastIndexOfAny(char[] anyOf), int Last…
Normalize        <\/span>Method                <\/span>string Normalize(), string Normalize(Syste…
PadLeft          <\/span>Method                <\/span>string PadLeft(int totalWidth), string Pad…
PadRight         <\/span>Method                <\/span>string PadRight(int totalWidth), string Pa…
Remove           <\/span>Method                <\/span>string Remove(int startIndex, int count), …
Replace          <\/span>Method                <\/span>string Replace(char oldChar, char newChar)…
Split            <\/span>Method                <\/span>string[] Split(Params char[] separator), s…
StartsWith       <\/span>Method                <\/span>bool StartsWith(string value), bool Starts…
Substring        <\/span>Method                <\/span>string Substring(int startIndex), string S…
ToCharArray      <\/span>Method                <\/span>char[] ToCharArray(), char[] ToCharArray(i…
ToLower          <\/span>Method                <\/span>string ToLower(), string ToLower(System.Gl…
ToLowerInvariant Method                <\/span>string ToLowerInvariant()
ToString         <\/span>Method                <\/span>string ToString(), string ToString(System….
ToUpper          <\/span>Method                <\/span>string ToUpper(), string ToUpper(System.Gl…
ToUpperInvariant Method                <\/span>string ToUpperInvariant()
Trim             <\/span>Method    <\/span>            <\/span>string Trim(Params char[] trimChars), stri…
TrimEnd          <\/span>Method                <\/span>string TrimEnd(Params char[] trimChars)
TrimStart        <\/span>Method                <\/span>string TrimStart(Params char[] trimChars)
Chars            <\/span>ParameterizedProperty char Chars(int index) {get;}
Length           <\/span>Property              <\/span>System.Int32 Length {get;}<\/p>\n


PS C:><\/p>\n

<\/font><\/span><\/p>\n

The line of code that retrieves the ConfigurationNamingContext<\/b> from rootdse is seen here:<\/p>\n

$Config = ([adsi]”LDAP:\/\/rootdse”).ConfigurationNamingContext<\/p>\n

<\/font><\/span><\/p>\n

To be able to use the ConfigurationNamingContext<\/b>, the string needs to be translated to a DirectoryEntry<\/b> object. To do this, the ADSI type accelerator is once again used: <\/p>\n

$dse = [adsi]”LDAP:\/\/$config”<\/p>\n

<\/font><\/span><\/p>\n

After the DirectoryEntry object has been created for the ConfigurationNamingContext<\/b>, it is used with the DirectoryServices.DirectorySearcher<\/b> .NET Framework class to retrieve instances of the nTDSDSA<\/b> object class. The nTDSDSA<\/b> object represents the replication agent on a domain controller. Because this object is invariant for the lifetime of the domain controller, the object GUID value can be used as an alternative identifier for the domain controller. More information about this object can be found on MSDN<\/font><\/a>. Because the nTDSDSA<\/b> object is found in the ConfigurationNamingContext<\/b>, you will need to tell the DirectorySearcher<\/b> to begin looking in that context. To do this, you use an overloaded constructor that accepts a DirectoryEntry<\/b> class in the first position and a string for the filter in the second position. The constructors for the DirectorySearcher<\/b> class are documented on MSDN<\/font><\/a>. <\/p>\n

$searcher = New-Object DirectoryServices.DirectorySearcher ($dse, “ObjectClass=nTDSDSA”)<\/p>\n

<\/font><\/span><\/p>\n

After you have created the searcher<\/b> object, the findall<\/b> method is used to retrieve all instances of objects in Active Directory that meet the filter criteria. Other methods from the DirectorySearcher<\/b> object are documented on MSDN<\/font><\/a>. The results from the findall<\/b> method are pipelined to the Foreach-Object<\/b> cmdlet. This is seen here: <\/p>\n

$searcher.findall() |<\/p>\n

<\/font><\/span><\/p>\n

The Foreach-Object<\/b> cmdlet is used to examine each object as it comes down the Windows PowerShell pipeline. When an object enters the pipeline, the ADSI type accelerator is used to retrieve the parent property of each nTDSDSA<\/b> object that is retrieved. This is seen here:<\/p>\n

ForEach-Object { ([adsi]$_.path).parent }<\/p>\n

<\/font><\/span><\/p>\n

As seen in the following image, two domain controllers are returned for the NWTraders.com domain. The first domain controller is named HYPERV and the second domain controller is named SERVER1: <\/p>\n

\"Image<\/p>\n


KH, that is all there is to querying the configuration context in Active Directory to retrieve a list of the domain controllers. Join us tomorrow for Part 2, as we continue working with Active Directory. <\/p>\n

If you want to know exactly what we will be scripting tomorrow, follow us on Twitter<\/a> or Facebook<\/a>. If you have any questions, send e-mail to us at scripter@microsoft.com<\/font><\/a> or post your questions on the Official Scripting Guys Forum<\/a>. See you tomorrow. Until then, peace.<\/p>\n

 <\/p>\n

Ed Wilson and Craig Liebendorfer, Scripting Guys<\/p>\n

<\/span><\/b><\/p>\n

 <\/p>\n","protected":false},"excerpt":{"rendered":"

Hey, Scripting Guy! I hope you do not think I am clueless, but I need to obtain a list of all the domain controllers in my domain. Can you help me out by writing a Windows PowerShell script to list all of the domain controllers in my domain? < p style=”MARGIN: 0in 0in 8pt” class=”MsoNormal”>– […]<\/p>\n","protected":false},"author":595,"featured_media":87096,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[1],"tags":[7,3,8,45],"class_list":["post-52323","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-scripting","tag-active-directory","tag-scripting-guy","tag-searching-active-directory","tag-windows-powershell"],"acf":[],"blog_post_summary":"

Hey, Scripting Guy! I hope you do not think I am clueless, but I need to obtain a list of all the domain controllers in my domain. Can you help me out by writing a Windows PowerShell script to list all of the domain controllers in my domain? < p style=”MARGIN: 0in 0in 8pt” class=”MsoNormal”>– […]<\/p>\n","_links":{"self":[{"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/posts\/52323","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/users\/595"}],"replies":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/comments?post=52323"}],"version-history":[{"count":0,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/posts\/52323\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/media\/87096"}],"wp:attachment":[{"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/media?parent=52323"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/categories?post=52323"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/tags?post=52323"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}