Windows Server 2008 Server Core : Configuring Directory Services - Listing Objects Using the DSGet Utility

• computer

• contact

• group

• ou (organizational unit)

• server

• user

• subnet

• site

• quota

• partition

The objects all use the same basic command line. You must supply a distinguished name for the object you want to access, followed by the items you want to display, and ending with any security-related information to access a remote machine. This utility uses the following syntax for each of the supported objects:

dsget computerComputerDN... [-dn] [-samid] [-sid] [-desc] [-loc]
   [-disabled] [{-s Server | -d Domain}] [-u UserName]
   [-p {Password | *}] [-c] [-q] [-l] [{-uc  | -uco  | -uci }]
   [-part PartitionDN [-qlimit] [-qused]]
dsget computerComputerDN [-memberof [-expand]]
   [{-s Server | -d Domain}] [-u UserName] [-p {Password | *}] [-c]
   [-q] [-l] [{-uc | -uco | -uci }]
dsget contactContactDN... [-dn] [-fn] [-mi] [-ln] [-display]
   [-desc] [-office] [-tel] [-email] [-hometel] [-pager] [-mobile]
   [-fax] [-iptel] [-title] [-dept] [-company]
   [{-s Server | -d Domain}] [-u UserName] [-p  {Password | *}] [-c]
   [-q] [-l] [{-uc  | -uco  | -uci }]
dsget groupGroupDN... [-dn] [-samid] [-sid] [-desc] [-secgrp]
   [-scope] [{-s Server | -d Domain}] [-u UserName]
   [-p {Password | *}] [-c] [-q] [-l] [{-uc  | -uco  | -uci }]
   [-part PartitionDN [-qlimit] [-qused]]
dsget groupGroupDN [{-memberof | -members }] [-expand]
   [{-s Server | -d Domain}] [-u UserName] [-p {Password | *}] [-c]
   [-q] [-l] [{-uc | -uco | -uci}]
dsget ouOrganizationalUnitDN... [-dn] [-desc]
   [{-s Server | -d Domain}] [-u UserName] [-p {Password | *}] [-c]
   [-q] [-l] [{-uc  | -uco  | -uci}]
dsget serverServerDN... [-dn] [-desc] [-dnsname] [-site]
   [-isgc] [{-s Server | -d Domain}] [-u UserName] [-p {Password | *}]
   [-c] [-q] [-l] [{-uc  | -uco  | -uci }]
dsget serverServerDN [{-s Server | -d Domain}] [-u UserName]
   [-p {Password | *}] [-c] [-q] [-l] [{-uc | -uco | -uci}]
   [-topobjowner Display]
dsget serverServerDN [{-s Server | -d Domain}] [-u UserName]
   [-p {Password | *}] [-c] [-q] [-l] [{-uc | -uco | -uci}]
   [-part PartitionDN]
dsget userUserDN... [-dn] [-samid] [-sid] [-upn] [-fn] [-mi] [-ln]
   [-display] [-empid] [-desc] [-office] [-tel] [-email]
   [-hometel] [-pager] [-mobile] [-fax] [-iptel] [-webpg] [-title]
   [-dept] [-company] [-mgr] [-hmdir] [-hmdrv] [-profile] [-loscr]
   [-mustchpwd] [-canchpwd] [-pwdneverexpires] [-disabled]
   [-acctexpires] [-reversiblepwd] [{-uc  | -uco  | -uci}]
   [-part PartitionDN [-qlimit] [-qused]]
dsget subnetSubnetDN... [-dn] [-desc] [-loc] [-site]
   [{-s Server | -d Domain}] [-u UserName] [-p {Password | *}] [-c]
   [-q] [-l] [{-uc | -uco  | -uci}]
dsget site SiteCN... [-dn] [-desc] [-autotopology] [-cachegroups]
   [-prefGCsite] [{-s Server | -d Domain}] [-u UserName]
   [-p {Password | *}] [-c] [-q] [-l] [{-uc  | -uco  | -uci}]

					  

dsget quotaObjectDN... [-dn] [-acct] [-qlimit]
   [{-s Server | -d Domain}] [-u UserName] [-p {Password | *}] [-c]
   [-q] [-l] [{-uc | -uco | -uci}]
dsget partitionObjectDN... [-dn] [-qdefault] [-qtmbstnwt]
   [-topobjowner Display] [{-s Server | -d Domain}] [-u UserName]
   [-p {Password | *}] [-c] [-q] [-l] [{-uc | -uco | -uci}]

The following list describes each of the display arguments and unique command line switches in alphabetical order.

-acct

Displays the distinguished names of accounts that have quotas assigned.

-acctexpires

Displays the object's account expires status.

-autotopology

Displays the object's Internet topology generation status. A value of yes means that the system automatically generates the topology for specified sites.

-c

Reports any errors encountered when displaying the object, but continues to the next object in the argument list when you specify number objects. The default action is to stop displaying data when the utility encounters the first error.

-cachegroups

Displays the object's universal group membership caching status. A value of yes means that logons don't check the global catalog.

-canchpwd

Displays the objects that can change password status. A value of yes means the user can change the password.

-company

Displays the object's company.

-dept

Displays the object's department.

-desc

Displays the object's description.

-disabled

Displays the object's account disabled status. When the utility returns yes, the object's account is disabled.

-display

Displays the object's display name.

-dn

Displays the object's distinguished name.

-dnsname

Displays the object's DNS hostname.

-email

Displays the object's email address.

-empid

Displays the object's employee identifier.

-expand

Displays the object's complete group membership by recursively expanding each group. The expansion continues until the utility reaches the end of the group listing no matter on how many levels the groups are nested.

-fax

Displays the object's facsimile telephone number.

-fn

Displays the object's first name.

-hmdir

Displays the object's home directory. The home directory can include either a standard or a UNC path.

-hmdrv

Displays the mapped drive associated with the object's home directory.

-hometel

Displays the object's home telephone number.

-iptel

Displays the object's IP telephone number.

-isgc

Displays the object's global catalog status—yes when it's a global catalog and no when it isn't.

-l

Displays the entries in a list format. The default setting displays the entries in a table format.

-ln

Displays the object's last name.

-loc

Displays the object's physical location.

-loscr

Displays the object's logon script path.

-memberof

Displays the object's group association. You can't use this argument when specifying multiple objects as input.

-members

Displays the object's list of members.

-mgr

Displays the object's manager's distinguished name.

-mi

Displays the object's middle initial.

-mobile

Displays the object's cellular telephone number.

-mustchpwd

Displays the object's must change password status. A value of yes means the user must change the password during the next logon.

-office

Displays the object's physical office location.

-pager

Displays the object's pager number.

-part

PartitionDN

Connects to the specified directory partition. You must use a distinguished name to specify the directory partition.

-prefGCsite

Displays the name of the preferred global catalog site used to refresh universal group membership caching for the object's domain controller.

-profile

Displays the object's profile path.

-pwdneverexpires

Displays the object's password never expires status. A value of yes means the password never expires.

-qdefault

Displays the default quota that applies to any security principal creating an object in the directory partition. An unlimited quota displays as −1.

-qlimit

Displays any effective quota associated with an object that appears within the specified object.

-qtmbstnwt

Displays the percentage to use when reducing the tombstone object count during a quota usage calculation.

-qused

Displays the amount of quota that the object has used within the specified directory partition.

-reversiblepwd

Displays the object's reversible password status. A value of yes means that user can use a password with reversible encryption.

-samid

Displays the object's SAM account name.

-scope

Displays the object's group scope—local (l), global (g), or universal (u).

-secgrp

Displays the object's security group status—yes for a security group and no for a distribution group.

-sid

Displays the object's SID.

-tel

Displays the object's business telephone number.

-title

Displays the object's title.

-topobjowner

[Display]

Displays a sorted list of the number objects that each security principal (users, computers, security groups, and InetOrgPersons) owns. The utility sorts the list with the largest owner first. You can specify the number of security principals to display as the argument for this command line switch. Displays all of the object owners by supplying a value of 0. The default setting displays 10 security principals.

-upn

Displays the object's UPN.