Domains - Forests

  • Thread starter Thread starter Guest
  • Start date Start date
Have a look at the RDN values (CN=) of the crossRef objects under
CN=Partitions,CN=Configuration,DC=forestRoot,DC=com

Obviously you'll have CN=Enterprise Configuration, CN=Enterprise Schema, and
CN=forestRoot listed in here. The others, providing you've not created any
external crossRef objects, will be other domains in the forest.


--

Paul Williams

http://www.msresource.net
http://forums.msresource.net


In AD, how to tell that 2 domains are in the same forest or different ones?
Thanks.
 
ptwilliams said:
Have a look at the RDN values (CN=) of the crossRef objects under
CN=Partitions,CN=Configuration,DC=forestRoot,DC=com

Obviously you'll have CN=Enterprise Configuration, CN=Enterprise Schema, and
CN=forestRoot listed in here. The others, providing you've not created any
external crossRef objects, will be other domains in the forest.
Click to expand...

When I first saw this question it bothered me and
although I though perhaps looking in AD Domains
and Trusts or using ADSI could work, I didn't think
of an easy way immediately.

Also, it bugged me a bit since normally an Admin
would (should?) know his own domains, but here
is what occurred to me today, using NTDSUtil:


D:\>ntdsutil
ntdsutil: metadata cleanup
metadata cleanup: connections
server connections: connect to server SOME_DC_NAME
Binding to SOME_DC_NAME ...
Connected to SOME_DC_NAME using credentials of locally logged on user.
server connections: quit
metadata cleanup: select operation target
select operation target: list domains
Found 1 domain(s)
0 - DC=domainname1,DC=com
1 - DC=childdomain,DC=domainname1,DC=com
2 - DC=otherdomain2,DC=local
select operation target: quit

This could even be scripted if you work at it.
 
Back
Top