This is an old revision of the document!
DSQuery
- search for domain controlers in actual tree/forest
dsquery server
- search in given domain forest
dsquery server -d <domain>
- complete forest
dsquery server -forest
dsacls
- list ACLs on AD object
dsacls "OU=xensrv,OU=server,DC=domain,DC=lab2,DC=schnuerle,DC=com"