How to get all computer accounts in an another domain using PowerShell?

Question

I am trying to get all computer accounts from the another domain.

Here is my PowerShell script:

$environment = "myDomain"
$strCategory = "computer"
$objDomain = New-Object System.DirectoryServices.DirectoryEntry("LDAP://dc=" + $environment + ",dc=com")
$objSearcher = New-Object System.DirectoryServices.DirectorySearcher ("LDAP://dc=" + $environment + ",dc=com")
$objSearcher.SearchRoot = $objDomain
$objSearcher.Filter = ("(objectCategory=$strCategory)")
$colProplist = "name"
foreach ($i in $colPropList){$objSearcher.PropertiesToLoad.Add($i)| Out-Null}  
$colResults = $objSearcher.FindAll()
 foreach ($objResult in $colResults) {
   $objComputer = $objResult.Properties
   Write-output $objComputer.name
}

I am getting this error:

Exception calling "FindAll" with "0" argument(s): "A referral was returned from the server.

How can I fix this error?

what is your FQDN domain name? Using your script in my domain do a great job! — CB.
– CB., Commented Oct 31, 2011 at 8:54

JPBlanc · Accepted Answer · 2011-11-02 09:09:07Z

Can you try this :

$dn = New-Object System.DirectoryServices.DirectoryEntry ("LDAP://DCIpAddress:389/dc=dom,dc=fr","[email protected]","admin")

# Here look for a user
$Rech = new-object System.DirectoryServices.DirectorySearcher($dn)
$Rech.filter = "(([email protected]))"
$Rech.SearchScope = "subtree"
$Rech.PropertiesToLoad.Add("distinguishedName");
$Rech.PropertiesToLoad.Add("sAMAccountName");  
$Rech.PropertiesToLoad.Add("lastLogon");  
$Rech.PropertiesToLoad.Add("telephoneNumber");
$Rech.PropertiesToLoad.Add("memberOf");
$Rech.PropertiesToLoad.Add("distinguishedname");
$Rech.PropertiesToLoad.Add("otherHomePhone"); # téléphone domicile autre

$liste = $Rech.FindAll()

It's the same as your code, but here I target a DC (you'd better target a domain DNS name)and I authenticate my connnexion. If the other domain is in the same forest, you can use the Enterprise admin account, if the other domain is in another forest, or in a trusted domain, use the administrator of the domain.

pb2q · Accepted Answer · 2013-09-16 15:44:57Z

4

I experienced a similar issue--I found that if I specified a server that was a GC and the port that I was able to succeed. I was using the PowerShell Get-AdUser cmdlet, but my scenario was similar (trying to query a universal group membership from a child domain).

get-aduser -server fqdn.gc.root.domain:3268

edited Sep 16, 2013 at 15:44

pb2q

59.9k19 gold badges150 silver badges152 bronze badges

answered Sep 16, 2013 at 15:29

atguilmette

412 bronze badges

Comments

Community · Accepted Answer · 2017-05-23 12:30:24Z

1

Very much like atguilmette's answer to this very question, I was able to get the Active Directory Cmdlets to work against a different domain than my current domain by specifying the -Server parameter. (Unlike that answer, I did not need to explicitly target a GC machine with a specific port. Perhaps my environment is special...)

Get-ADGroup the-group-in-the-other-domain -Server other.domain.com

edited May 23, 2017 at 12:30

CommunityBot

11 silver badge

answered Jan 13, 2015 at 2:25

chwarr

7,3802 gold badges34 silver badges58 bronze badges

Comments

Chris N · Accepted Answer · 2011-11-01 12:21:34Z

0

Quest's AD cmdlets offer a command specifically for connecting to another domain: Connect-QADService.

I've successfully used this in production.

answered Nov 1, 2011 at 12:21

Chris N

7,5391 gold badge27 silver badges27 bronze badges

Collectives™ on Stack Overflow

How to get all computer accounts in an another domain using PowerShell?

4 Answers 4

Comments

Comments

Comments

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

4 Answers 4

Comments

Comments

Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Related