Red Team Codex
@_g0dmodeGithubLinkedin
Search
⌃K
Links
Comment on page

Computer Enumeration

This details various different techniques and methods required to enumerate domain computers within Active Directory.
Windows
PowerView
Native PowerShell

All domain computers

This will get all the domain computers inside the Domain Computers group. Not an exhaustive list.
C:\> net group "Domain Computers" /domain

All domain computers

PS C:\> Get-DomainComputer

All domain computers with only "samaccountname" property

PS C:\> Get-DomainComputer -properties samaccountname

Enumerate specific domain computer

PS C:\> Get-DomainComputer CFS01

All domain computers

PS C:\> ([ADSISearcher]"ObjectClass=computer").FindAll()

Enumerate specific domain computer

Here we search for any computers with a name like DES*
PS C:\> ([ADSISearcher]"(&(objectClass=computer)(name=DES*))").FindAll()
Here we find any computers named CFS01
PS C:\> ([ADSISearcher]"(&(objectClass=computer)(name=CFS01))").FindAll()
​
​
​
​
Previous
Password Policy
Next
Domain Controllers
Last modified 3yr ago