適用於網域控制器健康檢查、遷移前基線採集、文件化網域拓撲。
#===========================================
# 列出網域資訊
#===========================================
$strComputer = "." # 本機,可改為遠端主機名/IP
$colItems = Get-WmiObject -Class "Win32_NTDomain" -Namespace "root\CIMV2" -ComputerName $strComputer
foreach ($objItem in $colItems) {
Write-Host "Caption: " $objItem.Caption
Write-Host "Client Site Name: " $objItem.ClientSiteName
Write-Host "Creation Class Name: " $objItem.CreationClassName
Write-Host "DC Site Name: " $objItem.DcSiteName
Write-Host "Description: " $objItem.Description
Write-Host "DNS Forest Name: " $objItem.DnsForestName
Write-Host "Domain Controller Address: " $objItem.DomainControllerAddress
Write-Host "Domain Controller Address Type: " $objItem.DomainControllerAddressType
Write-Host "Domain Controller Name: " $objItem.DomainControllerName
Write-Host "Domain GUID: " $objItem.DomainGuid
Write-Host "Domain Name: " $objItem.DomainName
Write-Host "DS Directory Service Flag: " $objItem.DSDirectoryServiceFlag
Write-Host "DS DNS Controller Flag: " $objItem.DSDnsControllerFlag
Write-Host "DS DNS Domain Flag: " $objItem.DSDnsDomainFlag
Write-Host "DS DNS Forest Flag: " $objItem.DSDnsForestFlag
Write-Host "DS Global Catalog Flag: " $objItem.DSGlobalCatalogFlag
Write-Host "DS Kerberos Distribution Center Flag: " $objItem.DSKerberosDistributionCenterFlag
Write-Host "DS Primary Domain Controller Flag: " $objItem.DSPrimaryDomainControllerFlag
Write-Host "DS Time Service Flag: " $objItem.DSTimeServiceFlag
Write-Host "DS Writable Flag: " $objItem.DSWritableFlag
Write-Host "Installation Date: " $objItem.InstallDate
Write-Host "Name: " $objItem.Name
Write-Host "Name Format: " $objItem.NameFormat
Write-Host "Primary Owner Contact: " $objItem.PrimaryOwnerContact
Write-Host "Primary Owner Name: " $objItem.PrimaryOwnerName
Write-Host "Roles: " $objItem.Roles
Write-Host "Status: " $objItem.Status
Write-Host ""
}
| 屬性 | 含義 | 運維價值 |
|---|---|---|
| DSPrimaryDomainControllerFlag | PDC 模擬器角色持有者 | 時間同步、密碼變更轉發、GPO 編輯鎖定點 |
| DSGlobalCatalogFlag | 全域類別目錄 (GC) 持有者 | 跨網域查詢、通用群組展開、登入驗證 |
| DSKerberosDistributionCenterFlag | KDC (Kerberos 金鑰分發中心) | 票證簽發、更新、跨域信任 |
| DomainControllerAddress | DC IP 位址 | 網路連通性驗證、防火牆規則 |
| DnsForestName / DnsDomainName | DNS 命名空間 | DNS 區域委派、條件轉送驗證 |
Import-Module ActiveDirectory
Get-ADDomain | Select-Object *
Get-ADDomainController -Filter * | Select-Object Name, Site, IPV4Address, OperationMasterRoles, IsGlobalCatalog
Get-ADForest | Select-Object *