quick way to know which childdomain still in w2000?

[eric romero]

Hi all

1 Windows2003 forest-1tree-multiple childdomains

Is there any quick way to obtain a list of all the childdomain "domain
functional level" ? ie "windows 2000 mixed or windows2000 native" or
"windows server 2003"
I know the root is at "windows server 2003" domain functional level.

thx

 

[Dean Wells [MVP]]

Hi all

1 Windows2003 forest-1tree-multiple childdomains

Is there any quick way to obtain a list of all the childdomain "domain
functional level" ? ie "windows 2000 mixed or windows2000 native" or
"windows server 2003"
I know the root is at "windows server 2003" domain functional level.

thx

Many ways are available; the following sprung to mind (note that
"ldifde" command below should be entered on one line only / copy and
paste it and modify the "dc=" components of the -d argument as
necessary) -

ldifde -d cn=partitions,cn=configuration,dc=mset,dc=local -r
"(|(systemFlags=3)(systemFlags=-2147483648))" -l
msds-behavior-version,dnsroot,ntmixeddomain,nETBIOSName -p subtree-f con

.... or ...

ldifde -d cn=partitions,cn=configuration,dc=<forest root DN> -r
"(|(systemFlags=3)(systemFlags=-2147483648))" -l
msds-behavior-version,dnsroot,ntmixeddomain,nETBIOSName -p subtree -f
con

The pertinent part of the result appears as follows -

Writing out entries.dn: CN=Partitions,CN=Conf...<snip>
changetype: add
msDS-Behavior-Version: 2

..dn: CN=MSET,CN=Partitions,CN=Conf...<snip>
changetype: add
msDS-Behavior-Version: 2
dnsRoot: mset.local
nETBIOSName: MSET
nTMixedDomain: 0
msDS-Behavior-Version: 2

.... or ...

Writing out entries.dn: CN=Partitions,CN=Conf...<snip>
changetype: add
msDS-Behavior-Version: 2 <forest functional level>
[[0=2000/1=Interim/2=2003 Native]]

..dn: CN=MSET,CN=Partitions,CN=Conf...<snip>
changetype: add
dnsRoot: <DNS name of domain>
nETBIOSName: <NetBIOS name of domain>
nTMixedDomain: <1 = mixed mode / 0 = native mode>
msDS-Behavior-Version: <0=2000/1=Interim/2=2003 Native>
[[line above is domain functional level]]

If "msDS-Behavior-Version" is omitted for a particular domain, equate
that to a zero.

HTH

 

[Joe Richards [MVP]]

Dean you really need to start using adfind man!

--
Joe Richards Microsoft MVP Windows Server Directory Services
www.joeware.net

Hi all

1 Windows2003 forest-1tree-multiple childdomains

Is there any quick way to obtain a list of all the childdomain "domain
functional level" ? ie "windows 2000 mixed or windows2000 native" or
"windows server 2003"
I know the root is at "windows server 2003" domain functional level.

thx

Many ways are available; the following sprung to mind (note that
"ldifde" command below should be entered on one line only / copy and
paste it and modify the "dc=" components of the -d argument as
necessary) -

ldifde -d cn=partitions,cn=configuration,dc=mset,dc=local -r
"(|(systemFlags=3)(systemFlags=-2147483648))" -l
msds-behavior-version,dnsroot,ntmixeddomain,nETBIOSName -p subtree-f con

... or ...

ldifde -d cn=partitions,cn=configuration,dc=<forest root DN> -r
"(|(systemFlags=3)(systemFlags=-2147483648))" -l
msds-behavior-version,dnsroot,ntmixeddomain,nETBIOSName -p subtree -f
con

The pertinent part of the result appears as follows -

Writing out entries.dn: CN=Partitions,CN=Conf...<snip>
changetype: add
msDS-Behavior-Version: 2

.dn: CN=MSET,CN=Partitions,CN=Conf...<snip>
changetype: add
msDS-Behavior-Version: 2
dnsRoot: mset.local
nETBIOSName: MSET
nTMixedDomain: 0
msDS-Behavior-Version: 2

... or ...

Writing out entries.dn: CN=Partitions,CN=Conf...<snip>
changetype: add
msDS-Behavior-Version: 2 <forest functional level>
[[0=2000/1=Interim/2=2003 Native]]

.dn: CN=MSET,CN=Partitions,CN=Conf...<snip>
changetype: add
dnsRoot: <DNS name of domain>
nETBIOSName: <NetBIOS name of domain>
nTMixedDomain: <1 = mixed mode / 0 = native mode>
msDS-Behavior-Version: <0=2000/1=Interim/2=2003 Native>
[[line above is domain functional level]]

If "msDS-Behavior-Version" is omitted for a particular domain, equate
that to a zero.

HTH

 

[Dean Wells [MVP]]

Dean you really need to start using adfind man!

Hi all

1 Windows2003 forest-1tree-multiple childdomains

Is there any quick way to obtain a list of all the childdomain
"domain functional level" ? ie "windows 2000 mixed or windows2000
native" or "windows server 2003"
I know the root is at "windows server 2003" domain functional level.

thx

Many ways are available; the following sprung to mind (note that
"ldifde" command below should be entered on one line only / copy and
paste it and modify the "dc=" components of the -d argument as
necessary) -

ldifde -d cn=partitions,cn=configuration,dc=mset,dc=local -r
"(|(systemFlags=3)(systemFlags=-2147483648))" -l
msds-behavior-version,dnsroot,ntmixeddomain,nETBIOSName -p subtree-f
con ... or ...

ldifde -d cn=partitions,cn=configuration,dc=<forest root DN> -r
"(|(systemFlags=3)(systemFlags=-2147483648))" -l
msds-behavior-version,dnsroot,ntmixeddomain,nETBIOSName -p subtree -f
con

The pertinent part of the result appears as follows -

Writing out entries.dn: CN=Partitions,CN=Conf...<snip>
changetype: add
msDS-Behavior-Version: 2

.dn: CN=MSET,CN=Partitions,CN=Conf...<snip>
changetype: add
msDS-Behavior-Version: 2
dnsRoot: mset.local
nETBIOSName: MSET
nTMixedDomain: 0
msDS-Behavior-Version: 2

... or ...

Writing out entries.dn: CN=Partitions,CN=Conf...<snip>
changetype: add
msDS-Behavior-Version: 2 <forest functional level>
[[0=2000/1=Interim/2=2003 Native]]

.dn: CN=MSET,CN=Partitions,CN=Conf...<snip>
changetype: add
dnsRoot: <DNS name of domain>
nETBIOSName: <NetBIOS name of domain>
nTMixedDomain: <1 = mixed mode / 0 = native mode>
msDS-Behavior-Version: <0=2000/1=Interim/2=2003 Native>
[[line above is domain functional level]]

If "msDS-Behavior-Version" is omitted for a particular domain, equate
that to a zero.

HTH

<GRIN> - base media, base media, base media (give MS ADFIND.EXE and get
it included with SP1 and we're good to go) ... FWIW - personally, I do
use it.

 

[eric romero]

ok where can I find the adfind.exe ?

Dean you really need to start using adfind man!

eric romero wrote:

Hi all

1 Windows2003 forest-1tree-multiple childdomains

Is there any quick way to obtain a list of all the childdomain
"domain functional level" ? ie "windows 2000 mixed or windows2000
native" or "windows server 2003"
I know the root is at "windows server 2003" domain functional level.

thx


Many ways are available; the following sprung to mind (note that
"ldifde" command below should be entered on one line only / copy and
paste it and modify the "dc=" components of the -d argument as
necessary) -

ldifde -d cn=partitions,cn=configuration,dc=mset,dc=local -r
"(|(systemFlags=3)(systemFlags=-2147483648))" -l
msds-behavior-version,dnsroot,ntmixeddomain,nETBIOSName -p subtree-f
con ... or ...

ldifde -d cn=partitions,cn=configuration,dc=<forest root DN> -r
"(|(systemFlags=3)(systemFlags=-2147483648))" -l
msds-behavior-version,dnsroot,ntmixeddomain,nETBIOSName -p subtree -f
con

The pertinent part of the result appears as follows -

Writing out entries.dn: CN=Partitions,CN=Conf...<snip>
changetype: add
msDS-Behavior-Version: 2

.dn: CN=MSET,CN=Partitions,CN=Conf...<snip>
changetype: add
msDS-Behavior-Version: 2
dnsRoot: mset.local
nETBIOSName: MSET
nTMixedDomain: 0
msDS-Behavior-Version: 2

... or ...

Writing out entries.dn: CN=Partitions,CN=Conf...<snip>
changetype: add
msDS-Behavior-Version: 2 <forest functional level>
[[0=2000/1=Interim/2=2003 Native]]

.dn: CN=MSET,CN=Partitions,CN=Conf...<snip>
changetype: add
dnsRoot: <DNS name of domain>
nETBIOSName: <NetBIOS name of domain>
nTMixedDomain: <1 = mixed mode / 0 = native mode>
msDS-Behavior-Version: <0=2000/1=Interim/2=2003 Native>
[[line above is domain functional level]]

If "msDS-Behavior-Version" is omitted for a particular domain, equate
that to a zero.

HTH

<GRIN> - base media, base media, base media (give MS ADFIND.EXE and get
it included with SP1 and we're good to go) ... FWIW - personally, I do
use it.

--
Dean Wells [MVP / Directory Services]
MSEtechnology
[[ Please respond to the Newsgroup only regarding posts ]]
R e m o v e t h e m a s k t o s e n d e m a i l

 

[Cary Shultz [A.D. MVP]]

Eric,

Go to http://www.joeware.net and look in the free WIN32 C++ tools. It is
right where my favorite tool - oldcmp - is located!

Cary

ok where can I find the adfind.exe ?

Dean you really need to start using adfind man!


Dean Wells [MVP] wrote:
eric romero wrote:

Hi all

1 Windows2003 forest-1tree-multiple childdomains

Is there any quick way to obtain a list of all the childdomain
"domain functional level" ? ie "windows 2000 mixed or windows2000
native" or "windows server 2003"
I know the root is at "windows server 2003" domain functional level.

thx


Many ways are available; the following sprung to mind (note that
"ldifde" command below should be entered on one line only / copy and
paste it and modify the "dc=" components of the -d argument as
necessary) -

ldifde -d cn=partitions,cn=configuration,dc=mset,dc=local -r
"(|(systemFlags=3)(systemFlags=-2147483648))" -l
msds-behavior-version,dnsroot,ntmixeddomain,nETBIOSName -p subtree-f
con ... or ...

ldifde -d cn=partitions,cn=configuration,dc=<forest root DN> -r
"(|(systemFlags=3)(systemFlags=-2147483648))" -l
msds-behavior-version,dnsroot,ntmixeddomain,nETBIOSName -p subtree -f
con

The pertinent part of the result appears as follows -

Writing out entries.dn: CN=Partitions,CN=Conf...<snip>
changetype: add
msDS-Behavior-Version: 2

.dn: CN=MSET,CN=Partitions,CN=Conf...<snip>
changetype: add
msDS-Behavior-Version: 2
dnsRoot: mset.local
nETBIOSName: MSET
nTMixedDomain: 0
msDS-Behavior-Version: 2

... or ...

Writing out entries.dn: CN=Partitions,CN=Conf...<snip>
changetype: add
msDS-Behavior-Version: 2 <forest functional level>
[[0=2000/1=Interim/2=2003 Native]]

.dn: CN=MSET,CN=Partitions,CN=Conf...<snip>
changetype: add
dnsRoot: <DNS name of domain>
nETBIOSName: <NetBIOS name of domain>
nTMixedDomain: <1 = mixed mode / 0 = native mode>
msDS-Behavior-Version: <0=2000/1=Interim/2=2003 Native>
[[line above is domain functional level]]

If "msDS-Behavior-Version" is omitted for a particular domain, equate
that to a zero.

HTH

<GRIN> - base media, base media, base media (give MS ADFIND.EXE and get
it included with SP1 and we're good to go) ... FWIW - personally, I do
use it.

--
Dean Wells [MVP / Directory Services]
MSEtechnology
[[ Please respond to the Newsgroup only regarding posts ]]
R e m o v e t h e m a s k t o s e n d e m a i l

 

[Dean Wells [MVP]]

ok where can I find the adfind.exe ?

Dean you really need to start using adfind man!


Dean Wells [MVP] wrote:
eric romero wrote:

Hi all

1 Windows2003 forest-1tree-multiple childdomains

Is there any quick way to obtain a list of all the childdomain
"domain functional level" ? ie "windows 2000 mixed or windows2000
native" or "windows server 2003"
I know the root is at "windows server 2003" domain functional
level.

thx


Many ways are available; the following sprung to mind (note that
"ldifde" command below should be entered on one line only / copy
and paste it and modify the "dc=" components of the -d argument as
necessary) -

ldifde -d cn=partitions,cn=configuration,dc=mset,dc=local -r
"(|(systemFlags=3)(systemFlags=-2147483648))" -l
msds-behavior-version,dnsroot,ntmixeddomain,nETBIOSName -p
subtree-f con ... or ...

ldifde -d cn=partitions,cn=configuration,dc=<forest root DN> -r
"(|(systemFlags=3)(systemFlags=-2147483648))" -l
msds-behavior-version,dnsroot,ntmixeddomain,nETBIOSName -p subtree
-f con

The pertinent part of the result appears as follows -

Writing out entries.dn: CN=Partitions,CN=Conf...<snip>
changetype: add
msDS-Behavior-Version: 2

.dn: CN=MSET,CN=Partitions,CN=Conf...<snip>
changetype: add
msDS-Behavior-Version: 2
dnsRoot: mset.local
nETBIOSName: MSET
nTMixedDomain: 0
msDS-Behavior-Version: 2

... or ...

Writing out entries.dn: CN=Partitions,CN=Conf...<snip>
changetype: add
msDS-Behavior-Version: 2 <forest functional level>
[[0=2000/1=Interim/2=2003 Native]]

.dn: CN=MSET,CN=Partitions,CN=Conf...<snip>
changetype: add
dnsRoot: <DNS name of domain>
nETBIOSName: <NetBIOS name of domain>
nTMixedDomain: <1 = mixed mode / 0 = native mode>
msDS-Behavior-Version: <0=2000/1=Interim/2=2003 Native>
[[line above is domain functional level]]

If "msDS-Behavior-Version" is omitted for a particular domain,
equate that to a zero.

HTH

<GRIN> - base media, base media, base media (give MS ADFIND.EXE and
get it included with SP1 and we're good to go) ... FWIW -
personally, I do use it.

--
Dean Wells [MVP / Directory Services]
MSEtechnology
[[ Please respond to the Newsgroup only regarding posts ]]
R e m o v e t h e m a s k t o s e n d e m a i l

.... didn't much like the LDIFDE syntax huh?

 

[eric romero]

none of them I prefer a general report telling me the status of each one of
the chidldomains

Is this the ldifde query? and is that going to browse all the existent
childdomains or should I do the query on each domain?

ldifde -d cn=partitions,cn=configuration,dc=<forest root DN> -r
"(|(systemFlags=3)(systemFlags=-2147483648))" -l
msds-behavior-version,dnsroot,ntmixeddomain,nETBIOSName -p subtree
-f con


thx

ok where can I find the adfind.exe ?

Joe Richards [MVP] wrote:
Dean you really need to start using adfind man!


Dean Wells [MVP] wrote:
eric romero wrote:

Hi all

1 Windows2003 forest-1tree-multiple childdomains

Is there any quick way to obtain a list of all the childdomain
"domain functional level" ? ie "windows 2000 mixed or windows2000
native" or "windows server 2003"
I know the root is at "windows server 2003" domain functional
level.

thx


Many ways are available; the following sprung to mind (note that
"ldifde" command below should be entered on one line only / copy
and paste it and modify the "dc=" components of the -d argument as
necessary) -

ldifde -d cn=partitions,cn=configuration,dc=mset,dc=local -r
"(|(systemFlags=3)(systemFlags=-2147483648))" -l
msds-behavior-version,dnsroot,ntmixeddomain,nETBIOSName -p
subtree-f con ... or ...

ldifde -d cn=partitions,cn=configuration,dc=<forest root DN> -r
"(|(systemFlags=3)(systemFlags=-2147483648))" -l
msds-behavior-version,dnsroot,ntmixeddomain,nETBIOSName -p subtree
-f con

The pertinent part of the result appears as follows -

Writing out entries.dn: CN=Partitions,CN=Conf...<snip>
changetype: add
msDS-Behavior-Version: 2

.dn: CN=MSET,CN=Partitions,CN=Conf...<snip>
changetype: add
msDS-Behavior-Version: 2
dnsRoot: mset.local
nETBIOSName: MSET
nTMixedDomain: 0
msDS-Behavior-Version: 2

... or ...

Writing out entries.dn: CN=Partitions,CN=Conf...<snip>
changetype: add
msDS-Behavior-Version: 2 <forest functional level>
[[0=2000/1=Interim/2=2003 Native]]

.dn: CN=MSET,CN=Partitions,CN=Conf...<snip>
changetype: add
dnsRoot: <DNS name of domain>
nETBIOSName: <NetBIOS name of domain>
nTMixedDomain: <1 = mixed mode / 0 = native mode>
msDS-Behavior-Version: <0=2000/1=Interim/2=2003 Native>
[[line above is domain functional level]]

If "msDS-Behavior-Version" is omitted for a particular domain,
equate that to a zero.

HTH

<GRIN> - base media, base media, base media (give MS ADFIND.EXE and
get it included with SP1 and we're good to go) ... FWIW -
personally, I do use it.

--
Dean Wells [MVP / Directory Services]
MSEtechnology
[[ Please respond to the Newsgroup only regarding posts ]]
R e m o v e t h e m a s k t o s e n d e m a i l

... didn't much like the LDIFDE syntax huh?

--
Dean Wells [MVP / Directory Services]
MSEtechnology
[[ Please respond to the Newsgroup only regarding posts ]]
R e m o v e t h e m a s k t o s e n d e m a i l

 

[Dean Wells [MVP]]

none of them I prefer a general report telling me the status of each
one of the chidldomains

Is this the ldifde query? and is that going to browse all the existent
childdomains or should I do the query on each domain?

ldifde -d cn=partitions,cn=configuration,dc=<forest root DN> -r
"(|(systemFlags=3)(systemFlags=-2147483648))" -l
msds-behavior-version,dnsroot,ntmixeddomain,nETBIOSName -p subtree
-f con


thx

The command will do exactly as you ask(ed) assuming you replace <forest
root dn> with the correct DN representation of your forest. Nothing
further is required.

 

[Joe Richards [MVP]]

With Adfind the command would look like (all one line)

adfind -config -rb cn=partitions -f
"(|(systemFlags=3)(systemFlags=-2147483648))" msds-behavior-version dnsroot
ntmixeddomain nETBIOSName

and wouldn't have to be modified per forest, same command, every forest. )


output would be something like




[Tue 09/14/2004 18:26:48.37] +
F:\DEV\ForHP\Perl\ADStory>adfind -config -rb cn=partitions -f
"(|(systemFlags=3)(systemFlags=-2147483648))" msds-behavior-version dnsroot
ntmixeddomain nETBIOSName

AdFind V01.20.00cpp Joe Richards ([email protected]) August 2004

Using server: 2k3dc01.joe.com
Base DN: cn=partitions,CN=Configuration,DC=joe,DC=com

dn:CN=Partitions,CN=Configuration,DC=joe,DC=com

msDS-Behavior-Version: 2
dn:CN=CHILD1,CN=Partitions,CN=Configuration,DC=joe,DC=com
dnsRoot: child1.joe.com
nETBIOSName: CHILD1
nTMixedDomain: 0
msDS-Behavior-Version: 2
dn:CN=JOE,CN=Partitions,CN=Configuration,DC=joe,DC=com
dnsRoot: joe.com
nETBIOSName: JOE
nTMixedDomain: 0
msDS-Behavior-Version: 2

3 Objects returned

[Tue 09/14/2004 18:27:10.12] +
F:\DEV\ForHP\Perl\ADStory>



I think I would personally set the filter to be

(systemFlags=3)

which would look like

[Tue 09/14/2004 18:28:30.30] +
F:\DEV\ForHP\Perl\ADStory>adfind -config -rb cn=partitions -f "(systemFlags=3)"
msds-behavior-version dnsroot ntmixeddomain nETBIOSName

AdFind V01.20.00cpp Joe Richards ([email protected]) August 2004

Using server: 2k3dc01.joe.com
Base DN: cn=partitions,CN=Configuration,DC=joe,DC=com

dn:CN=CHILD1,CN=Partitions,CN=Configuration,DC=joe,DC=com

dnsRoot: child1.joe.com
nETBIOSName: CHILD1
nTMixedDomain: 0
msDS-Behavior-Version: 2
dn:CN=JOE,CN=Partitions,CN=Configuration,DC=joe,DC=com
dnsRoot: joe.com
nETBIOSName: JOE
nTMixedDomain: 0
msDS-Behavior-Version: 2

2 Objects returned

 

[Dean Wells [MVP]]

With Adfind the command would look like (all one line)

adfind -config -rb cn=partitions -f
"(|(systemFlags=3)(systemFlags=-2147483648))" msds-behavior-version
dnsroot ntmixeddomain nETBIOSName

and wouldn't have to be modified per forest, same command, every
forest. )

output would be something like




[Tue 09/14/2004 18:26:48.37] +
F:\DEV\ForHP\Perl\ADStory>adfind -config -rb cn=partitions -f
"(|(systemFlags=3)(systemFlags=-2147483648))" msds-behavior-version
dnsroot ntmixeddomain nETBIOSName

AdFind V01.20.00cpp Joe Richards ([email protected]) August 2004

Using server: 2k3dc01.joe.com
Base DN: cn=partitions,CN=Configuration,DC=joe,DC=com

dn:CN=Partitions,CN=Configuration,DC=joe,DC=com

msDS-Behavior-Version: 2
dn:CN=CHILD1,CN=Partitions,CN=Configuration,DC=joe,DC=com
dnsRoot: child1.joe.com
nETBIOSName: CHILD1
nTMixedDomain: 0
msDS-Behavior-Version: 2
dn:CN=JOE,CN=Partitions,CN=Configuration,DC=joe,DC=com
dnsRoot: joe.com
nETBIOSName: JOE
nTMixedDomain: 0
msDS-Behavior-Version: 2

3 Objects returned

[Tue 09/14/2004 18:27:10.12] +
F:\DEV\ForHP\Perl\ADStory>



I think I would personally set the filter to be

(systemFlags=3)

which would look like

[Tue 09/14/2004 18:28:30.30] +
F:\DEV\ForHP\Perl\ADStory>adfind -config -rb cn=partitions -f
"(systemFlags=3)" msds-behavior-version dnsroot ntmixeddomain
nETBIOSName
AdFind V01.20.00cpp Joe Richards ([email protected]) August 2004

Using server: 2k3dc01.joe.com
Base DN: cn=partitions,CN=Configuration,DC=joe,DC=com

dn:CN=CHILD1,CN=Partitions,CN=Configuration,DC=joe,DC=com

dnsRoot: child1.joe.com
nETBIOSName: CHILD1
nTMixedDomain: 0
msDS-Behavior-Version: 2
dn:CN=JOE,CN=Partitions,CN=Configuration,DC=joe,DC=com
dnsRoot: joe.com
nETBIOSName: JOE
nTMixedDomain: 0
msDS-Behavior-Version: 2

2 Objects returned

That was my first attempt also ... until I realized it caused the forest
functional level to be omitted from the result set ... which may be
useful in this context.

 

[Joe Richards [MVP]]

True true.

--
Joe Richards Microsoft MVP Windows Server Directory Services
www.joeware.net

With Adfind the command would look like (all one line)

adfind -config -rb cn=partitions -f
"(|(systemFlags=3)(systemFlags=-2147483648))" msds-behavior-version
dnsroot ntmixeddomain nETBIOSName

and wouldn't have to be modified per forest, same command, every
forest. )

output would be something like




[Tue 09/14/2004 18:26:48.37] +
F:\DEV\ForHP\Perl\ADStory>adfind -config -rb cn=partitions -f
"(|(systemFlags=3)(systemFlags=-2147483648))" msds-behavior-version
dnsroot ntmixeddomain nETBIOSName

AdFind V01.20.00cpp Joe Richards ([email protected]) August 2004

Using server: 2k3dc01.joe.com
Base DN: cn=partitions,CN=Configuration,DC=joe,DC=com

dn:CN=Partitions,CN=Configuration,DC=joe,DC=com

msDS-Behavior-Version: 2
dn:CN=CHILD1,CN=Partitions,CN=Configuration,DC=joe,DC=com

dnsRoot: child1.joe.com
nETBIOSName: CHILD1
nTMixedDomain: 0
msDS-Behavior-Version: 2
dn:CN=JOE,CN=Partitions,CN=Configuration,DC=joe,DC=com

dnsRoot: joe.com
nETBIOSName: JOE
nTMixedDomain: 0
msDS-Behavior-Version: 2

3 Objects returned

[Tue 09/14/2004 18:27:10.12] +
F:\DEV\ForHP\Perl\ADStory>



I think I would personally set the filter to be

(systemFlags=3)

which would look like

[Tue 09/14/2004 18:28:30.30] +
F:\DEV\ForHP\Perl\ADStory>adfind -config -rb cn=partitions -f
"(systemFlags=3)" msds-behavior-version dnsroot ntmixeddomain
nETBIOSName
AdFind V01.20.00cpp Joe Richards ([email protected]) August 2004

Using server: 2k3dc01.joe.com
Base DN: cn=partitions,CN=Configuration,DC=joe,DC=com

dn:CN=CHILD1,CN=Partitions,CN=Configuration,DC=joe,DC=com

dnsRoot: child1.joe.com
nETBIOSName: CHILD1
nTMixedDomain: 0
msDS-Behavior-Version: 2
dn:CN=JOE,CN=Partitions,CN=Configuration,DC=joe,DC=com

dnsRoot: joe.com
nETBIOSName: JOE
nTMixedDomain: 0
msDS-Behavior-Version: 2

2 Objects returned

That was my first attempt also ... until I realized it caused the forest
functional level to be omitted from the result set ... which may be
useful in this context.