PowerShell: List Domain Controllers in Active Directory

List the Domain Controllers in your Active Directory forest using PowerShell.  This script lists the domain controllers in your AD, and their IP Addresses.  First, it gets the path to the configuration container in your AD, then it enumerates the partitions in the partitions container.  For each partition that has a netBios name (these are the domains in your forest), it goes to the domain controllers OU and enumerates the domain controllers.  For each domain controller, it performs a DNS lookup and returns the IP address.  Results are output to the screen and to a file called DomainControllers.txt.

$hostEntry=New-Object -TypeName System.Net.IPHostEntry
$configurationContainer = ([adsi] "LDAP://RootDSE").Get("ConfigurationNamingContext")
$partitions = ([adsi] "LDAP://CN=Partitions,$configurationContainer").psbase.children
"Domain`tDomainController`tIPAddress" | Out-File -FilePath "DomainControllers.txt"

foreach($partition in $partitions)
{
 if($partition.netbiosName -ne ""){
  "DCs in the " + $partition.netbiosName + " Domain"
  $partitionDN=$partition.ncName
  $dcContainer=[adsi] "LDAP://ou=domain controllers,$partitionDN"
  $dcs = $dcContainer.psbase.children
  foreach($dc in $dcs){
   $hostEntry= [System.Net.Dns]::GetHostByName($dc.dnsHostName)
   "`t" + $dc.dnsHostName + "`t" + $hostEntry.AddressList[0].IPAddressToString
   "$($partition.netbiosName)`t$($dc.dnsHostName)`t$($hostEntry.AddressList[0].IPAddressToString)" | Out-File -FilePath "DomainControllers.txt" -Append
  }
 }
}

Related Posts:

• Backup DFS Namespaces Using PowerShell
• Translate Active Directory Name Formats Using PowerShell
• List Linux Users in Active Directory Using PowerShell
• Enable Trust for Delegation in Active Directory Using PowerShell
• TCP/IP Subnet Math with PowerShell - What AD Site is that Server in?
• List Sites and Subnets in Active Directory with PowerShell
• Find Disabled Users in Active Directory with PowerShell
• List Forest-wide Group Memberships with PowerShell
• Find Old Computer Accounts in AD with PowerShell
• List SPNs in Active Directory with PowerShell
• List Domain Controllers in Active Directory