Get-ADDomain
Use Get-ADDomain to return information about an Active Directory domain, including its FSMO role holders and naming contexts.
Documentation: Microsoft Learn — Get-ADDomain
Syntax
See the command anatomy
Read the command and its supplied arguments. This example requires real PowerShell or its module; this diagram does not execute it.
Get-ADDomain [-Identity] <ADDomain> [-Current <ADCurrentDomainType>] [-Server <String>] [-Credential <PSCredential>] [<CommonParameters>]- Stage 1Get-ADDomain
-Identity -Current -Server -Credential
Try it
PowerShell example · browser support is limited.
Execution scope: The full example below requires PowerShell outside this browser. You can edit this runner to use the supported practice commands; unsupported syntax returns an explanation.
Follow the objects
Run the command to inspect each stage.
Examples
Select DNSRoot, NetBIOSName, DomainMode, DistinguishedName
Show reference output
Sample output · fictional data, shaped like the real thing
DNSRoot NetBIOSName DomainMode DistinguishedName ------- ----------- ---------- ----------------- corp.local CORP Windows2016Domain DC=corp,DC=local
Select PDCEmulator, RIDMaster, InfrastructureMaster
Show reference output
Sample output · fictional data, shaped like the real thing
PDCEmulator RIDMaster InfrastructureMaster ----------- --------- -------------------- DC01.corp.local DC01.corp.local DC02.corp.local
Select ComputersContainer, UsersContainer
Show reference output
Sample output · fictional data, shaped like the real thing
ComputersContainer UsersContainer ------------------ -------------- CN=Computers,DC=corp,DC=local CN=Users,DC=corp,DC=local
Parameters
Parameter definitions:
-Identity-Current-Server-Credential
Practical use and troubleshooting
Practical scenario: Use Get-ADDomain when you need to return information about an Active Directory domain, including its FSMO role holders and naming contexts. Start with one identified target and inspect the returned values before extending the operation to a list. Keep the identity in your report so you can trace each result back to the object or path that produced it.
Common error and fix: An unexpected domain can be selected by the current context. Specify the intended identity or server and inspect the returned DNSRoot before acting on the result. In an unattended script, capture this failure with its original error record and record which target failed. An empty result and an unsuccessful query must remain distinguishable in the final report.
See also: Get-ADForest. Get-ADDomain describes a domain; Get-ADForest describes the forest and its domains. Domain-level settings and forest-level role holders are different scopes. Read the linked command before substituting it; similar names do not imply identical inputs or output.
Recap
Get-ADDomain Use Get-ADDomain to return information about an Active Directory domain, including its FSMO role holders and naming contexts.
Next: Get-ADForest