ACTIVE DIRECTORY SECURITY CHECKLIST ... - Leet Upload

Active Directory Checklist, V1R1.2 Field Security Operations
22 September 2006 Defense Information Systems Agency
Method 2: Windows "net" Command
a. Open a Command Prompt window (“Start”, “Run…”, “cmd.exe”).
b. Enter “net group "domain controllers"”.
c. Each domain controller will be listed as a member of the OU.
Notes: This method assumes that domain controller computers are members of the Domain
Controllers OU. This is the default AD configuration and Microsoft recommends strongly
against changing it.
Method 3: Windows Server 2003 "dsquery" command
a. Open a Command Prompt window (“Start”, “Run…”, “cmd.exe”).
b. Enter “dsquery server”
c. The distinguished name of each domain controller will be listed.
Method 4: Windows Support Tools "netdom" command
a. Open a Command Prompt window (“Start”, “Run…”, “cmd.exe”).
b. Enter “netdom query dc”
c. The host name for each domain controller will be listed.
D.1.2 Determining “Immediate” Domain Structure
The following are methods to determine the name of the “current” domain and the forest root
domain. The “current” domain is the AD domain to which the logged-on user has been
authenticated. Information is obtained by querying the AD database on the domain controller.
Method 1: Microsoft Management Console
a. Start the Active Directory Users and Computers console (“Start”, “Run…”, “dsa.msc”).
b. By default the current domain will be listed in the left pane.
c. Start the Active Directory Domains and Trusts console (“Start”, “Run…”, “domain.msc”).
d. The left pane will contain an icon for each domain that represents the root of an item in the
AD hierarchy. Expand each node in the left pane to locate the domain name obtained from
the Active Directory Users and Computers console. This will display the relationship of the
current domain to its root domain.
Method 2: Script
a. Create a script file (optionally named dir\AD_List_DomNames.vbs) with the following
contents:
'List AD Domain Names - "Current" \ Forest Root
'
Option Explicit
Dim strAD_objdata
Dim objRootDSE
Dim strDefNC, strRootNC
Dim strdnsHostName
Dim strCurrDom, strRootDom
'
UNCLASSIFIED
D-2