The WinOps Blog

1. How to find all members for a particular group.
>dsget group "<DN of the group>" –members

2. How to find all groups for a particular member (including nested groups).
>dsget user "<DN of the user>" -memberof –expand

3. How to find memberof , lastlogontimestamp , homemta(Mail server) , Samaccountname & so on(Repadmin /showattr <DCname> <"DN">)
>dsquery * "<DN>" -scope base -attr lastlogontimestamp memberoff
>repadmin /showattr <DCNAME> <"DN"> /attrs:lastlogon,homemta,whencreated,lastlogontimestamp,samaccountname

4. How to modify user last name.
>dsmod user <dn> -ln "<last name>"

5. How to find memberof , lastlogontimestamp , homemta(Mail server) , Samaccountname & so on for "n" number of users
>Create a batch file(for /f "eol= tokens=* delims= usebackq" %%x in (%1) do dsquery * %%x -scope base -attr sAMAccountName objectsid whencreated lastlogontimestamp mail homeMTA memberof) e.g ds.bat
>Create a text file (All users DN e.g:dn.txt)
>Open cmd & run ds.bat dn.txt >> c:\attr.txt

6. How to find DN for n number of computers
>for /f %%x in (%1) do dsquery computer -name %%x
(Create a batch file with line & create a txt file computer.txt
>open cmd >>>>>>batchfile computer.txt >> c:\dn.txt

7. Find Subnet with associated site.
>>dsquery subnet -name <CIDR> | dsget subnet

8.How to find disabled users
>dsquery user "dc=ssig,dc=com" -disabled
>dsquery * -filter "(&(objectCategory=person)(objectClass=user)(userAccountControl:1.2.840.113556.1.4.803:=2))"

9. How to find OS?
>D:\>dsquery * <"DN"> -scope base -attr operatingSystem

10. How to find site ?
>dsquery site -name * -limit 0
>dsquery server -s <server> | dsget server -site

11. How to get tombstonelifetime ?
>dsquery * "CN=Directory Service,CN=Windows NT,CN=Services,CN=Configuration,DC=yourdomain,DC=com" -scope base -attr tombstonelifetime

12. How to find mail box?
>dsquery * -filter "samaccountname=biswajit" -attr homemdb 

13. How to find the GCs?
>DsQuery Server -domain contoso.com -isgc

14.How to find all the active users?
>dsquery * -filter "(&(objectCategory=person)(objectClass=user)(!userAccountControl:1.2.840.113556.1.4.803:=2))"

15.How to find users logon name by their mail address for bulk users?
For Single user
dsquery * domainroot -filter "(&(objectCategory=Person)(objectClass=User)(mail=e-mailaddress))" -attr name
For bulk users
for /f %%x in (%1) do dsquery * domainroot -filter "(&(objectcategory=person)(objectclass=user)(mail=%%x))" -attr name
16. How to find Schema version?
>dsquery * cn=schema,cn=configuration,dc=domainname,dc=local -scope base -attr objectVersion

17. How to find Site name by server name ?
> dsquery server -name test1 | dsget server -site
> dsquery server -name (provide the server name for DN) | dsget server -site

18. How to find all groups of a user is memberof without the DN's?
> dsquery user -samid anthony | dsget user -memberof | dsget group -samid
> dsquery user -samid (provide the samaccount name of the user) | dsget user -memberof | dsget group -samid

19. How to find all groups if a computer account without giving the DN's ?
> dsquery computer -name test1 | dsget computer -memberof | dsget group -samid

20. How to find PDC role holder for the existing domain ?
> dsquery server -hasfsmo PDC

21. How to find Infrastructure Master role holder existing domain ?
> dsquery server -hasfsmo INFR

22. How to find RID master role holder for existing domain ?
> dsquery server -hasfsmo RID

23. How to find Schema master role holder in a Forest ?
> dsquery server -forest -hasfsmo Schema

24. How to find Domain Naming Master in a Forest ?
> dsquery server -forest -hasfsmo Name

25. How to find if the Domain Controller is a Global Catalog (GC) or not ?
> dsquery server -name test1 | dsget server -isgc

26. How to find subnet with associated site.
>dsquery subnet -name 10.222.88.0/25 | dsget subnet