Get the root of a Directory Server information tree.

      Get-ADRootDSE [-AuthType {Negotiate | Basic}] [-Credential PSCredential]
         [-Properties string[]] [-Server string] [CommonParameters]

   -AuthType {Negotiate | Basic}
       The authentication method to use: Negotiate (or 0), Basic (or 1)
       A Secure Sockets Layer (SSL) connection is required for Basic authentication.

   -Credential PSCredential
       A user account that has permission to perform this action.
       The default is the current user unless the cmdlet is run from an AD PowerShell provider drive
       in which case the account associated with the drive is the default.

       "User64" or "Domain01\User64" or a PSCredential object.

   -Properties string[]
       The properties of the output object to retrieve from the server.
       Use this parameter to retrieve properties that are not included in the default set.

       Specify the properties as a comma-separated list of names, or to display all attributes,
       specify * (asterisk).

       To specify an individual extended property, use the name of the property.
       For properties that are not default or extended properties, specify the LDAP provider name of the attribute.
       The Get-* cmdlets (piped to Get-Member) can be used to retrieve properties.

       for example:
          Get-ADGroup -Identity Administrators | Get-Member
          Get-ADGroup -Identity Administrators -Properties *| Get-Member

          GetADUser -Identity xiaoping  -Properties OfficePhone,Organization |Get-Member
          GetADUser -Identity xiaoping  -Properties otherTelephone, otherMobile |Get-Member

   -Server string
       The AD Domain Services instance to connect to, this may be a Fully qualified domain name,
       NetBIOS name, Fully qualified directory server name (with or without port number) or AD Snapshot instance.

       Examples:  demo

Get-ADRootDSE gets the conceptual object representing the root of the directory information tree of a directory server.

This tree provides information about the configuration and capabilities of the directory server, such as the distinguished name for the configuration container, the current time on the directory server, and the functional levels of the directory server and the domain.


Get the RootDSE from the default domain controller:

PS C:\> Get-ADRootDSE

Get the RootDSE information including the supportedExtension property for Server64:

PS C:\> Get-ADRootDSE -Server Server64 -Properties supportedExtension

“It has beeen said that the love of money is the root of all evil. The want of money is so quite as truly” ~ Samuel Butler

Related PowerShell Cmdlets

Get-adObject - Get one or more AD objects.

Copyright © 1999-2023
Some rights reserved