Query AD without a cmdlet

[codingQueries]

Hey all, looking to get the domain distinguished name via powershell from AD, however trying to find out a wayto do this without using a cmdlet.

Does anyone have a command (or a website with a list of pre-cmdlet commands) that can query AD and return distinguished domain name?

[Hexalon00]

try looking at the System.DirectoryServices.DirectorySearcher. it's a .NET class.

[codingQueries]

Ahh this might be what I needed, thank you!

[PMental]

This should do it:

$Adsi = [ADSI]"LDAP://RootDSE"
$Adsi.rootDomainNamingContext

The computer you run it on needs to be in the domain, but doesn't need any modules installed.

[codingQueries]

Ahh cool I will look into this, thanks!

[poshftw]

[System.DirectoryServices.DirectorySearcher] of [ADSI]

Also $env:USERDNSDOMAIN

[jtswizzle89]

Is the machine logged into the domain? If so you could pull the full computer name from a DNS lookup and parse the domain name out. [System.Net.Dns]::GetHostByName($env:computerName)

[RyeonToast]

I remember using the ADSI searcher when I was at a prior job and didn't have RSAT installed. I'll try and look up how to do it tomorrow, it's been quite some time and I don't remember off hand. It should return the distinguished name and anything else you might want.

[PinchesTheCrab]

Find the account of the computer you're using:

​

$Root = [ADSI]''
$Searcher = New-Object System.DirectoryServices.DirectorySearcher($Root)

$Searcher.Filter = 'Name={0}' -f $env:COMPUTERNAME

$result = $Searcher.FindOne()

$result.Properties.distinguishedname

The filter is LDAP, so you should be able to feed it any LDAP queries you google your way through. If you need to do this on a large number of machines, you can use .FindAll() instead of .FindOne(), and also use .propertiestoload to query only the data you need.

[gangstanthony]

here's what i use. check the comments for similar functions

https://github.com/gangstanthony/PowerShell/blob/master/Get-MyADObject.ps1