AD Partition defaults

In many cases, a default value will be used for -Partition if no value is specified.
The rules for determining the default value are given below.

Note that rules listed first are evaluated first and once a default value can be determined, no further rules will be evaluated.

In AD DS environments, a default value for -Partition will be set in the following cases:

• If the Identity parameter is set to a distinguished name, the default value of Partition is automatically generated from this distinguished name.
• If running cmdlets from an AD provider drive, the default value of Partition is automatically generated from the current path in the drive.

If none of the previous cases apply, the default value of Partition will be set to the default partition or naming context of the target domain.

In AD LDS environments, a default value for -Partition will be set in the following cases:

• If the Identity parameter is set to a distinguished name, the default value of Partition is automatically generated from this distinguished name.
• If running cmdlets from an Active Directory provider drive, the default value of Partition is automatically generated from the current path in the drive.
• If the target AD LDS instance has a default naming context, the default value of Partition will be set to the default naming context.

To specify a default naming context for an AD LDS environment, set the msDS-default NamingContext property of the AD directory service agent (DSA) object (nTDSDSA) for the AD LDS instance.

• If none of the previous cases apply, the Partition parameter will not take any default value.
  

“If you think technology can solve your security problems, then you don’t understand the problems and you don’t understand the technology” ~ Bruce Schneier

Related PowerShell Cmdlets

AD commands