ACTIVE DIRECTORY SECURITY CHECKLIST ... - Leet Upload

Active Directory Checklist, V1R1.2 Field Security Operations
22 September 2006 Defense Information Systems Agency
Method 2: Script
a. Create a script file (optionally named dir\AD_List_FSMOInfo.vbs) with the following
contents:
'List FSMO Role Holders
'
Option Explicit
Dim strAD_objdata
Dim objRootDSE, objSchemaNC, objConNC, objDefNC, objRIDC, objInfC
Dim objNTDS, objServer
Dim strSchNC, strSchCont, strSch_FSMO
Dim strConNC, strConCont, strDN_FSMO
Dim strDefNC, strDefCont, strPDCE_FSMO
Dim strRIDCont, strRID_FSMO
Dim strInfCont, strInf_FSMO
'
Set objRootDSE = GetObject("LDAP://rootDSE")
'
' Get Forest Schema Master
strSchNC = objRootDSE.Get("SchemaNamingContext")
Set objSchemaNC = GetObject("LDAP://" & strSchNC)
strSchCont = objSchemaNC.Get("fsmoRoleOwner")
Set objNTDS = GetObject("LDAP://" & strSchCont)
Set objServer = GetObject(objNTDS.Parent)
strSch_FSMO = objServer.Get("dnsHostName")
'
' Get Forest Domain Naming Master
strConNC = objRootDSE.Get("ConfigurationNamingContext")
Set objConNC = GetObject("LDAP://CN=Partitions," & strConNC)
strConCont = objConNC.Get("fsmoRoleOwner")
Set objNTDS = GetObject("LDAP://" & strConCont)
Set objServer = GetObject(objNTDS.Parent)
strDN_FSMO = objServer.Get("dnsHostName")
'
' Get Domain PDC Emulator
strDefNC = objRootDSE.Get("defaultNamingContext")
Set objDefNC = GetObject("LDAP://" & strDefNC)
strDefCont = objDefNC.Get("fsmoRoleOwner")
Set objNTDS = GetObject("LDAP://" & strDefCont)
Set objServer = GetObject(objNTDS.Parent)
strPDCE_FSMO = objServer.Get("dnsHostName")
'
' Get RID Master
Set objRIDC = GetObject("LDAP://CN=RID Manager$,CN=System," & strDefNC)
strRIDCont = objRIDC.Get("fsmoRoleOwner")
Set objNTDS = GetObject("LDAP://" & strRIDCont)
Set objServer = GetObject(objNTDS.Parent)
strRID_FSMO = objServer.Get("dnsHostName")
UNCLASSIFIED
D-5