Domain or Workgroup

Commands

systeminfo	Extensive system info
systeminfo | findstr /B /C:"Domain"	Retrieves domain or workgroup information from system summary.
get-ciminstance CIM_ComputerSystem	Shows if in Domain or Workgroup, reveals if VM, hostname
get-computerinfo	Extensive system info
echo $env:USERDOMAIN	Get domain name
echo $env:USERDNSDOMAIN	Get FQDN or a domain.
echo $env:logonserver	Get name of the domain controller (Not working for me)
gpresult /V	Get current policy applied
wmic ntdomain list /format:list	Displays information about the Domain and Domain Controllers
wmic computersystem get domain	Displays the domain or workgroup using WMIC.
[System.Environment]::UserDomainName	PowerShell command to display the domain name of the current user.
net config workstation	Shows network configuration including domain or workgroup.
nltest /dclist:<DOMAIN>	List domain controllers

PowerShell command to get domain or workgroup via WMI.

Get-WmiObject Win32_ComputerSystem | Select-Object Domain 

reg query "HKLM\system\currentcontrolset\services\tcpip\parameters"

Look for "NV Domain key". Next, see the systeminfo output. What is the value of the "Domain" field?

If the NV Domain key doesn't exist or exists and is empty = definitely workgroup.

If there's something in NV Domain and it matches systeminfo = definitely domain.

If there's something in NV Domain and it does not match systeminfo = definitely workgroup.

Registry Locations

Domain Information:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters The Domain value in this key shows the domain name of the computer.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon The DefaultDomainName value holds the default domain name used for login. Workgroup Information:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters The NV Hostname value in this key represents the computer's name in the workgroup.

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\ComputerName\ActiveComputerName The ComputerName value contains the active computer name, which is used in the workgroup.