COMMAND EVERYTHING.
Read directory-server root metadata to discover naming contexts and server capabilities.
Active Directory · Risk: Low · Documentation VerifiedLast verified: 2026-10-26
Returns the root DSE for the selected or default directory server.
Get-ADRootDSE [-AuthType <ADAuthType>] [-Credential <PSCredential>] [-Properties <String[]>] [-Server <String>]
[<CommonParameters>]Directory read access appropriate to the requested objects is required. Replication diagnostics may require additional delegated directory permissions; use an approved administrative account where necessary.
Windows / ActiveDirectory module · Windows Server 2025 PowerShell reference; RSAT module and domain capabilities determine availability
Windows with the ActiveDirectory PowerShell module (RSAT), connectivity to an appropriate directory server, and an authenticated directory context. Replace example identities and hosts with authorized targets.
Read-only example. Directory identities, group membership, policies, and topology can expose sensitive organizational information. Store and share results only with authorized recipients.
Get-ADRootDSEReturns the root DSE for the selected or default directory server.
Sign in to keep your own command reference lists.
Explain or customize this command with AI