Is the server a DC

[Patrick]

How would I walk up to a server and see if it is a DC? I did a net
start to see what services are started. but not sure which would tell
me this, if any. thanks.

 

[Kenny Verhaege]

Just do start run dcpromo en look if he wants to promote the server or not

 

[Patrick]

not my server, doing an audit for a corp. they might not want me doing
that

 

[Tariq Changgez]

Go to Start -> Settings -> Control Panel -> Administrative
Tools. Several shortcuts will be displayed here. If the
first three of them start with the words "Active
Directory ..." then this is a DC otherwise it could be a
member server.

 

[Patrick]

thanks

Go to Start -> Settings -> Control Panel -> Administrative
Tools. Several shortcuts will be displayed here. If the
first three of them start with the words "Active
Directory ..." then this is a DC otherwise it could be a
member server.

 

[ptwilliams]

I figured you'd be given a script. But you haven't. The problem with the
Admin Tools point is that member servers could have the adminpak.msi
installed, which then makes this useless (some of my member servers do have
this!).

There are a couple of ways that I can think of:

- Ctrl+Alt+Del - is there a (This Computer) in the list?? If not, then it
is a DC
- System Applet - Primary DNS Suffix - if it's a DC this cannot be changed.
- Event log - is there a directory services event log?? If so it is, or at
least was, a DC

Use all of the above and you'll be fine.

Although a better way would be to wait for one of the WMI/ ADSI guru's to
give you the code. I would also think that the use of dcdiag, nltest, and
the new ds tools will also give you this...


--

Paul Williams
_________________________________________
http://www.msresource.net


Join us in our new forums!
http://forums.msresource.net
_________________________________________


How would I walk up to a server and see if it is a DC? I did a net
start to see what services are started. but not sure which would tell
me this, if any. thanks.

 

[Steve]

some other ways from future reference

if you can see the sysvol or netlogon shares being advertised by running a
net share from the cmd line on the machine in question you will know it is a
DC.

You can also do this from start run open by using \\servername\netlogon from
a client machine on the network
if it is a dc the netlogon (or sysvol) share should open in an explorer
window.

search the c drive for the file ntds.dit

Check Active directory users and computers in the domain controllers OU by
default the DC's in a given domain should be in that location.

or feel free to review

http://support.microsoft.com/?kbid=221804


for other methods.

rgds

Steve

 

[Cary Shultz [A.D. MVP]]

Since you apparently have access to the command prompt, I might simply enter
'net share' and if you see both NETLOGON and SYSVOL then you know that it is
a Domain Controller.

There are also other ways to do this.....

HTH,

Cary

 

[Patrick]

great answers everyone thanks

Since you apparently have access to the command prompt, I might simply enter
'net share' and if you see both NETLOGON and SYSVOL then you know that it is
a Domain Controller.

There are also other ways to do this.....

HTH,

Cary

 

[Hank Arnold]

I *like* that one....... Quick and accurate.......

I remember the first time I did that and didn't see the "This Computer"
option. Stomach flip flopped for a while until I remembered you can't do a
local logon to a DC....