Powershell Tip #18: Find RODC (Read-Only Domain Controllers)

By | August 27, 2015

Tip: You can list the RODC (Read-Only Domain Controllers) with PowerShell.

list-rodc-powershell

Note 1: The attribute PrimaryGroupID 521 is the RID for the “Read-only Domain Controllers” built-in group in Active Directory.

Well-known security identifiers in Windows operating systems
https://support.microsoft.com/en-us/kb/243330

  • SID: S-1-5- 21domain -521
    Name: Read-only Domain Controllers
    Description: A Global group. Members of this group are Read-Only Domain Controllers in the domain

Note 2 : Get-ADDomainController and Get-ADComputer are cmdlets from the ActiveDirectory module.


previous-buttonnext-button

One thought on “Powershell Tip #18: Find RODC (Read-Only Domain Controllers)

  1. Pingback: Powershell Tip #19: List FSMO roles | Powershell Guru

Leave a Reply

Your email address will not be published. Required fields are marked *