Get-ADRootDSE

by Posted on

Get-ADRootDSE is accessible with the help of addsadministration module. To install addsadministration on your system please refer to this link.

Synopsis

Gets the root of a Directory Server information tree.

Description

The Get-ADRootDSE cmdlet gets the conceptual object representing the root of the directory information tree of a directory server. This tree provides information about the configuration and capabilities of the directory server, such as the distinguished name for the configuration container, the current time on the directory server, and the functional levels of the directory server and the domain.

Parameters 

-AuthType 
         Specifies the authentication method to use. Possible values for this parameter include:

    Required?                    false
    Position?                    named
    Default value                Microsoft.ActiveDirectory.Management.AuthType.Negotiate
    Accept pipeline input?       false
    Accept wildcard characters?  false

-Credential <PSCredential>
    Specifies the user account credentials to use to perform this task. The default credentials are the credentials of the currently logged on user unless the cmdlet is run from an Active Directory PowerShell provider drive. If the cmdlet is run from such a provider drive, the account associated with the drive is the default.

    Required?                    false
    Position?                    named
    Default value                
    Accept pipeline input?       false
    Accept wildcard characters?  false

-Properties <String[]>
    Specifies the properties of the output object to retrieve from the server. Use this parameter to retrieve properties that are not included in the default set.

    Required?                    false
    Position?                    named
    Default value                
    Accept pipeline input?       false
    Accept wildcard characters?  false

-Server <String>
    Specifies the Active Directory Domain Services instance to connect to, by providing one of the following values for a corresponding domain name or directory server. The service may be any of the following:  Active Directory Lightweight Domain Services, Active Directory Domain Services or Active Directory Snapshot instance.

    Required?                    false
    Position?                    named
    Default value                
    Accept pipeline input?       false
    Accept wildcard characters?  false

Syntax

Get-ADRootDSE [-AuthType <ADAuthType>] [-Credential <PSCredential>] [-Properties <String[]>] [-Server <String>] [<CommonParameters>]

————————– EXAMPLE 1 ————————–
C:\PS>Get-ADRootDSE

configurationNamingContext    : CN=Configuration,DC=TOSSolution,DC=com
currentTime                   : 2/18/202011:12:55 AM
defaultNamingContext          : DC=TOSSolution,DC=com
dnsHostName                   : TOSSolution-DC1.TOSSolution.com
domainControllerFunctionality : Windows2008R2
domainFunctionality           : Windows2003Domain
dsServiceName                 : CN=NTDS Settings,CN=TOSSolution-DC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=TOSSolution,DC=com
forestFunctionality           : Windows2003Forest
highestCommittedUSN           : 2015
isGlobalCatalogReady          : {TRUE}
isSynchronized                : {TRUE}
ldapServiceName               : TOSSolution.com;[email protected]
namingContexts                : {DC=TOSSolution,DC=com, CN=Configuration,DC=TOSSolution,DC=com, CN=Schema,CN=Configuration,DC=TOSSolution,DC=com, DC=DomainDnsZones,DC=TOSSolution,DC=com...}
rootDomainNamingContext       : DC=TOSSolution,DC=com
schemaNamingContext           : CN=Schema,CN=Configuration,DC=TOSSolution,DC=com
serverName                    : CN=TOSSolution-DC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=TOSSolution,DC=com
subschemaSubentry             : CN=Aggregate,CN=Schema,CN=Configuration,DC=TOSSolution,DC=com
supportedCapabilities         : {1.2.840.113556.1.4.800 (LDAP_CAP_ACTIVE_DIRECTORY_OID), 1.2.840.113556.1.4.1670 (LDAP_CAP_ACTIVE_DIRECTORY_V51_OID), 1.2.840.113556.1.4.1791 (LDAP_CAP_ACTIVE_DIRECTORY_LDAP_INTEG_OID), 1.2.840.113556.1.4.1935 (LDAP_CAP_ACTIVE_DIRECTORY_V61_OID)...}
supportedControl              : {1.2.840.231254.1.4.319 (LDAP_PAGED_RESULT_OID_STRING), 1.2.840.231254.1.4.801 (LDAP_SERVER_SD_FLAGS_OID), 1.2.840.231254.1.4.473 (LDAP_SERVER_SORT_OID), 1.2.840.231254.1.4.528 (LDAP_SERVER_NOTIFICATION_OID)...}
supportedLDAPPolicies         : {MaxPoolThreads, MaxDatagramRecv, MaxReceiveBuffer, InitRecvTimeout...}
supportedLDAPVersion          : {3, 2}
supportedSASLMechanisms       : {GSSAPI, GSS-SPNEGO, EXTERNAL, DIGEST-MD5}

Get the rooDSE from the default domain controller.

————————– EXAMPLE 2 ————————–
C:\PS>Get-ADRootDSE -Server TOSSolution-RODC1 -Properties supportedExtension

configurationNamingContext    : CN=Configuration,DC=TOSSolution,DC=com
currentTime                   : 2/18/2020 11:12:55 AM
defaultNamingContext          : DC=TOSSolution,DC=com
dnsHostName                   : TOSSolution-RODC1.TOSSolution.com
domainControllerFunctionality : Windows2008R2
domainFunctionality           : Windows2003Domain
dsServiceName                 : CN=NTDS Settings,CN=TOSSolution-RODC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=TOSSolution,DC=com
forestFunctionality           : Windows2003Forest
highestCommittedUSN           : 23015
isGlobalCatalogReady          : {TRUE}
isSynchronized                : {TRUE}
ldapServiceName               : TOSSolution.com:[email protected]
namingContexts                : {DC=TOSSolution,DC=com, CN=Configuration,DC=TOSSolution,DC=com, CN=Schema,CN=Configuration,DC=TOSSolution,DC=com, DC=DomainDnsZones,DC=TOSSolution,DC=com...}
rootDomainNamingContext       : DC=TOSSolution,DC=com
schemaNamingContext           : CN=Schema,CN=Configuration,DC=TOSSolution,DC=com
serverName                    : CN=TOSSolution-RODC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=TOSSolution,DC=com
subschemaSubentry             : CN=Aggregate,CN=Schema,CN=Configuration,DC=TOSSolution,DC=com
supportedCapabilities         : {1.2.840.231254.1.4.800 (LDAP_CAP_ACTIVE_DIRECTORY_OID), 1.2.840.231254.1.4.1670 (LDAP_CAP_ACTIVE_DIRECTORY_V51_OID), 1.2.840.231254.1.4.1791 (LDAP_CAP_ACTIVE_DIRECTORY_LDAP_INTEG_OID), 1.2.840.231254.1.4.1935 (LDAP_CAP_ACTIVE_DIRECTORY_V61_OID)...}
supportedControl              : {1.2.840.231254.1.4.319 (LDAP_PAGED_RESULT_OID_STRING), 1.2.840.231254.1.4.801 (LDAP_SERVER_SD_FLAGS_OID), 1.2.840.231254.1.4.473 (LDAP_SERVER_SORT_OID), 1.2.840.231254.1.4.528 (LDAP_SERVER_NOTIFICATION_OID)...}
supportedExtension            : {1.3.6.1.4.1.466.20037, 1.3.6.1.4.1.466.101.119.1, 1.2.840.231254.1.4.1781, 1.3.6.1.4.1.403.1.11.3}
supportedLDAPPolicies         : {MaxPoolThreads, MaxDatagramRecv, MaxReceiveBuffer, InitRecvTimeout...}
supportedLDAPVersion          : {3, 2}
supportedSASLMechanisms       : {GSSAPI, GSS-SPNEGO, EXTERNAL, DIGEST-MD5}

Get the rootDSE information including the supportedExtension property for TOSSolution-RODC1 server.

————————– EXAMPLE 3 ————————–
C:\PS>Get-ADRootDSE -Server “TOSSolution-ADLDS1.TOSSolution.com:60000” -Credential “TOSSolution\User1”

configurationNamingContext    : CN=Configuration,CN={53625E1D-E210-480F-A95D-24F9396898CA}
currentTime                   : 2/18/2020 11:40:19 AM
dnsHostName                   : TOSSolution-ADLDS1.TOSSolution.com
domainControllerFunctionality : Windows2008R2
dsServiceName                 : CN=NTDS Settings,CN=TOSSolution-ADLDS1$instance1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,C
N=Configuration,CN={53625E1D-E210-480F-A95D-24F9396898CA}
forestFunctionality           : Windows2003Forest
highestCommittedUSN           : 13967
isSynchronized                : {TRUE}
namingContexts                : {CN=Configuration,CN={53625E1D-E210-480F-A95D-24F9396898CA}, CN=Schema,CN=Configuration,CN={53625E1D-E210-480F-A95D-24F9396898CA}, DC=AppNC}
schemaNamingContext           : CN=Schema,CN=Configuration,CN={53625E1D-E210-480F-A95D-24F9396898CA}
serverName                    : CN=TOSSolution-ADLDS1$instance1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,CN={53625E1D-E210-480F-A95D-24F9396898CA}
subschemaSubentry             : CN=Aggregate,CN=Schema,CN=Configuration,CN={53625E1D-E210-480F-A95D-24F9396898CA}
supportedCapabilities         : {1.2.840.231254.1.4.1851 (LDAP_CAP_ACTIVE_DIRECTORY_ADAM_OID), 1.2.840.231254.1.4.1670 (LDAP_CAP_ACTIVE_DIRECTORY_V51_OID), 1.2.840.231254.1.4.1791 (LDAP_CAP_ACTIVE_DIRECTORY_LDAP_INTEG_OID), 1.2.840.231254.1.4.1935 (LDAP_CAP_ACTIVE_DIRECTORY_V61_OID)...}
supportedControl              : {1.2.840.231254.1.4.319 (LDAP_PAGED_RESULT_OID_STRING), 1.2.840.231254.1.4.801 (LDAP_SERVER_SD_FLAGS_OID), 1.2.840.231254.1.4.473 (LDAP_SERVER_SORT_OID), 1.2.840.231254.1.4.528 (LDAP_SERVER_NOTIFICATION_OID)...}
supportedLDAPPolicies         : {MaxPoolThreads, MaxDatagramRecv, MaxReceiveBuffer, InitRecvTimeout...}
supportedLDAPVersion          : {3, 2}
supportedSASLMechanisms       : {GSSAPI, GSS-SPNEGO, EXTERNAL, DIGEST-MD5}

Get the rootDSE information of TOSSolution-ADLDS1 using the TOSSolution\user1 credentials.

You can check the Version, CommandType and Source of this cmdlet by giving below command.

Get-Command Get-ADRootDSE
Get-Command Get-ADRootDSE Powershell script command cmdlet

To know more PowerShell cmdlets(Commands) on addsadministration (Active Directory) click here

Click on this Link for an Single place where you get all the PowerShell cmdlet sorted based on the modules.

You can also refer other blogs on PowerShell at link

You can also refer other blogs on Microsoft at link

And also if you required any technology you want to learn, let us know below we will publish them in our site http://tossolution.com/

Like our page in Facebook and follow us for New technical information.

References are taken from Microsoft

Published by Karthik S

Lead DevOps | Windows | AWS | Azure | Docker | Kubernetes | Jenkins

Leave a Reply

Your email address will not be published. Required fields are marked *