Enumerate

Once RSAT is installed, you get access to DS and AD commands.

rsop

Resultant Set of Policy (Group Policy Objects).

gpresult /r

Displays the Resultant Set of Policy (RSoP) for a user or computer, showing applied Group Policy settings.

Get-ADDomain

Get domain info.

Get-ADDomainController

AD Controller.

dsquery user

Lists all user accounts in Active Directory.

dsquery group

Lists all groups in Active Directory.

dsquery computer

Lists all computer objects in Active Directory.

dsquery ou

Lists all organizational units in Active Directory.

dsget user

Retrieves properties of a user account.

dsget group

Retrieves properties of a group.

dsget computer

Retrieves properties of a computer object.

Get-ADUser

Retrieves user account information using PowerShell.

Get-ADGroup

Retrieves group information using PowerShell.

Get-ADComputer

Retrieves computer object information using PowerShell.

Get-ADOrganizationalUnit

Retrieves organizational unit information using PowerShell.

Get-AdComputer <hostname> -Properties Description

Description of remote computer.

get-aduser -filter {Enabled -eq "FALSE"} -properties

Find disabled accounts.

ldifde

Command-line utility for importing and exporting data to and from Active Directory.

csvde

Command-line utility for importing and exporting data to and from Active Directory.

net user /domain

Lists user accounts in the domain.

net group /domain

Lists groups in the domain.

nltest /dclist:domain

Lists domain controllers in the specified domain.

repadmin /showreps

Displays replication status between domain controllers.

Last updated

Was this helpful?