Schema Version

Schema Version:-
Windows 2000 :13
Windows 2003 :30
Windows 2003 R2:31
Windows 2008 :44
Windows 2008R2 :47
Windows Server 2012 : 56
Windows Server 2012 R2 : 69

We can see the schema version from adsiedit.msc.The attribute is "object version".

Or you can use dsquery
dsquery * cn=schema,cn=configuration,dc=domainname,dc=local -scope base -attr objectVersion


Verify ForestPrep, Domainprep & Rodcprep Result -
Powershell & DSQuery

http://social.technet.microsoft.com/wiki/contents/articles/23219.verify-forestprep-domainprep-rodcprep-result.aspx

How to find users logon name by their mail address for bulk users?

For Single user
dsquery * domainroot -filter "(&(objectCategory=Person)(objectClass=User)(mail=e-mailaddress))" -attr name

For bulk users
for /f %%x in (%1) do dsquery * domainroot -filter "(&(objectcategory=person)(objectclass=user)(mail=%%x))" -attr name

Find all enabled/disabled AD users

QuestWinsows PowerShell
Find all enabled AD usersget-qaduser -includeallproperties -ldapfilter "(!(userAccountControl:1.2.840.113556.1.4.803:=2))"
# Get Enabled users only
Get-QADUser -Enabled -SizeLimit 0
- or -
# Get Disabled users only
Get-QADUser -Disabled -SizeLimit 0

How to find group membership for “n” number of users

How to find group membership for “n” number of users

Quest ActiveRoles Management Shell for Active Directory

1. How to find all users


Quest ActiveRoles Management Shell for Active Directory

Prereqisites :1: Windows XP, 2003, 2008
2: Powershell 1 or 2
3: DOT Net 3.5

*************************************
2.How to find all groups
Get-QADGroup

How to find group members for n number of groups

$groups=get-content groups.txt
Foreach($group in $groups)
{

Get-QADGroupMember $group
Get-qadgroup $group

}

Find memberof for n number of users with powershell

$users=get-content users.txt
Foreach($user in $users)
{

get-Qadmemberof $user
Get-qaduser $user

}