dsquery * domainroot -filter “(&(objectCategory=computer)(operatingSystem=Windows XP*))”

The command above would give you a list of all computers that have a Windows XP operating system. For Windows Servers, change the command as follows:

dsquery * domainroot -filter “(&(objectCategory=computer)(operatingSystem=Windows Server*))”

The output of the commands above would look something like this:

samid

server1$

server2$

server3$

dsget succeeded

Note the ‘samid’ at the head and ‘dsget succeeded’ at the end and the ‘$’ at the end tail of every server name.

If you are like me, and you would like just get a nice clean output with only server names, you can run this command:

for /f “Tokens=1 delims=$” %a in (‘dsquery * domainroot -filter “(&(objectCategory=computer)(operatingSystem=Windows Server*))”^| dsget computer -samid^|find /V “samid” ^| find /V “dsget”‘) do echo %a

The output of the command shown above would be:

server1

server2

server3

… and can be used as input to a file or another command etc…

Related posts:

1. DSQuery Operating System Service Pack Version
2. How to Backup and Restore Active Directory
3. Active Directory Audit Script
4. Active Directory Password Expiry Reminder Email
5. Diskpart.exe Warning when expanding drive

In such a situation, instead of maintaining both zones internally and externally, it would be better and safer (avoiding human error) to setup a Split Brain DNS server to automatically forward all DNS queries for external.domain.com to the publicly hosted DNS server.

This is how it is done:

1.On the Windows Server 2003 server, open the DNS console.
2.Right-click the DNS server you wish to work with and click Properties.
3.Click the Forwarders tab onthe DNS properties window.
4.Click the New button on the right of the DNS domain list.
5.Enter the domain name (in our case external.domain.com) for which the conditional forwarding should be enabled and click OK.
6.Click on the new domain forward that you just added in DNS domains list and type the IP address of the primary DNS server for that domain in the box below, labeled Selected Domains Forwarder IP Address List.
7.Click the Add button.

Test the configuration. You will be able to resolve all external.domain.com addresses from within the network now!

Related posts:

1. How to Backup and Restore Active Directory
2. OCS 2007 Protocol Stack Error Event ID 14517 When Starting Services
3. Error: RewriteEngine not allowed here
4. A Certificate could not be found that can be used with this Extensible Authentication Protocol
5. The WinRoute tool