List Remote Domain(s) Trusts & Functional Levels – Powershell Script
Powershell Script to List Multiple Remote Domain(s) Trusts and Functional Levels including the Trust Status.
- Copy all the Domains you wish to get this report run on a text file and name it “domains.txt”
- Place it in the same location as the script and run the script.
<#
.Synopsis
Find and Verify Trusts and Functional Level of Multiple Domains
.DESCRIPTION
Find and Verify Trusts and Functional Level of Multiple Domains
.EXAMPLE
Script needs a File with Domain Names in a text file, Domains.txt
.Author
Murali M Palla
.Contact
[email protected]
.Version
v1 - Feb-26,2015
#>
$SourceFile = ".\Domains.txt"
$ScriptStart = Get-Date -Format dd-MMM-yyyy-hh-mm-ss
$Report = ".\TrustInfo_$ScriptStart.csv"
clear
if(!(Test-Path $SourceFile)){Write-Host "Unable to find a File $SourceFile with list Domains";exit}
$DomainList = Get-Content $SourceFile
$TrustContainer = @()
foreach ($Domain in $DomainList)
{
$Error.Clear()
try
{
Write-Host "Checking Forest & Domain Functional Levels for $Domain" -ForegroundColor Yellow
$SourceDomainContext = New-Object System.DirectoryServices.ActiveDirectory.DirectoryContext('domain',"$Domain") -ErrorAction SilentlyContinue
$SourceDomain = [System.DirectoryServices.ActiveDirectory.Domain]::GetDomain([System.DirectoryServices.ActiveDirectory.DirectoryContext]$SourceDomainContext)
$SourceForestContext = New-Object System.DirectoryServices.ActiveDirectory.DirectoryContext('forest',"$Domain") -ErrorAction SilentlyContinue
$SourceForest = [system.directoryservices.activedirectory.Forest]::GetForest([System.DirectoryServices.ActiveDirectory.DirectoryContext]$SourceForestContext)
$PDCEmulator = $SourceDomain.PdcRoleOwner.Name
$SourceDomainFunctonalLevel = $SourceDomain.DomainMode
$SourceForestFunctionalLevel = $SourceForest.ForestMode
$SourceDomainName = $SourceDomain.Name
}
catch
{
Write-Host "Error while Checking $Domain : $($_.Exception.Message)" -ForegroundColor White
$TrustObject = New-Object -TypeName psobject
Add-Member -InputObject $TrustObject -MemberType NoteProperty -Name SourceDomain -Value "$Domain"
Add-Member -InputObject $TrustObject -MemberType NoteProperty -Name SourceDomainFunctionalLevel -Value ""
Add-Member -InputObject $TrustObject -MemberType NoteProperty -Name SourceForestFunctionalLevel -Value ""
Add-Member -InputObject $TrustObject -MemberType NoteProperty -Name TrustedDomain -Value ""
Add-Member -InputObject $TrustObject -MemberType NoteProperty -Name NETBIOSName -Value ""
Add-Member -InputObject $TrustObject -MemberType NoteProperty -Name TargetDomainFunctonalLevel -Value ""
Add-Member -InputObject $TrustObject -MemberType NoteProperty -Name TargetForestFunctionalLevel -Value ""
Add-Member -InputObject $TrustObject -MemberType NoteProperty -Name TrustedDCName -Value ""
Add-Member -InputObject $TrustObject -MemberType NoteProperty -Name TrustDirection -Value ""
Add-Member -InputObject $TrustObject -MemberType NoteProperty -Name TrustType -Value ""
Add-Member -InputObject $TrustObject -MemberType NoteProperty -Name TrustStatus -Value "Error Connecting to $Domain"
Add-Member -InputObject $TrustObject -MemberType NoteProperty -Name TrustStatusString -Value "$($_.Exception.Message)"
$TrustContainer += $TrustObject
}
if(!($Error.Count))
{
$Error.Clear()
Write-Host "$Domain Validated, Connecting to check Trusts" -ForegroundColor DarkYellow
$WMIQueryTrusts = Get-WmiObject -Namespace root\MicrosoftActiveDirectory -Class Microsoft_DomainTrustStatus -ComputerName $PDCEmulator -ErrorAction SilentlyContinue
if ($Error.Count)
{
Write-Host "Error Connecting to $PDCEmulator : $($_.Exception.Message)" -ForegroundColor White
$error.Clear()
$TrustObject = New-Object -TypeName psobject
Add-Member -InputObject $TrustObject -MemberType NoteProperty -Name SourceDomain -Value "$SourceDomainName"
Add-Member -InputObject $TrustObject -MemberType NoteProperty -Name SourceDomainFunctionalLevel -Value "$SourceDomainFunctonalLevel"
Add-Member -InputObject $TrustObject -MemberType NoteProperty -Name SourceForestFunctionalLevel -Value "$SourceForestFunctionalLevel"
Add-Member -InputObject $TrustObject -MemberType NoteProperty -Name TrustedDomain -Value ""
Add-Member -InputObject $TrustObject -MemberType NoteProperty -Name NETBIOSName -Value ""
Add-Member -InputObject $TrustObject -MemberType NoteProperty -Name TargetDomainFunctonalLevel -Value ""
Add-Member -InputObject $TrustObject -MemberType NoteProperty -Name TargetForestFunctionalLevel -Value ""
Add-Member -InputObject $TrustObject -MemberType NoteProperty -Name TrustedDCName -Value ""
Add-Member -InputObject $TrustObject -MemberType NoteProperty -Name TrustDirection -Value ""
Add-Member -InputObject $TrustObject -MemberType NoteProperty -Name TrustType -Value ""
Add-Member -InputObject $TrustObject -MemberType NoteProperty -Name TrustStatus -Value "Error Connecting to $PDCEmulator"
Add-Member -InputObject $TrustObject -MemberType NoteProperty -Name TrustStatusString -Value "$($_.Exception.Message)"
$TrustContainer += $TrustObject
}
else {
Write-Host "Found $($WMIQueryTrusts.Count) Trusts, Please wait while I check and create a report" -ForegroundColor Green
foreach ($Trust in $WMIQueryTrusts)
{
$TargetForestFunctionalLevel = $null
$TargetDomainFunctionalLevel = $null
$TargetDomainName = $Trust.trusteddomain
Write-Host "Verifying Trust $($Trust.TrustedDomain)" -ForegroundColor Yellow
try
{
Write-Host "Checking Forest Functional Levels for $TargetDomainName" -ForegroundColor Yellow
$TargetForestContext = New-Object System.DirectoryServices.ActiveDirectory.DirectoryContext('forest',"$TargetDomainName") -ErrorAction SilentlyContinue
$TargetForest = [system.directoryservices.activedirectory.Forest]::GetForest([System.DirectoryServices.ActiveDirectory.DirectoryContext]$TargetForestContext)
$TargetForestFunctionalLevel = $TargetForest.ForestMode
}
catch
{
Write-Host "Error Wile Checking Forest Functional Levels for $TargetDomainName : $($_.Exception.Message)" -ForegroundColor White
$TargetForestFunctionalLevel = "Err Connecting, Check Manually"
$error.Clear()
}
try
{
Write-Host "Checking Domain Functional Levels for $TargetDomainName" -ForegroundColor Yellow
$TargetDomainContext = New-Object System.DirectoryServices.ActiveDirectory.DirectoryContext('domain',"$TargetDomainName") -ErrorAction SilentlyContinue
$TargetDomain = [System.DirectoryServices.ActiveDirectory.Domain]::GetDomain([System.DirectoryServices.ActiveDirectory.DirectoryContext]$TargetDomainContext)
$TargetDomainFunctionalLevel = $TargetDomain.DomainMode
}
catch
{
Write-Host "Error Wile Checking Domain Functional Levels for $TargetDomainName : $($_.Exception.Message)" -ForegroundColor White
$TargetDomainFunctionalLevel = "Err Connecting, Check Manually"
$error.Clear()
}
$TrustedDomain = $Trust.TrustedDomain
$NETBIOSName = $Trust.FlatName
$TrustedDCName = $Trust.TrustedDCName
$TrustDirection = $Trust.TrustDirection
switch ($TrustDirection)
{
1 {$TrustDirection = "Inbound"}
2 {$TrustDirection = "Outbound"}
3 {$TrustDirection = "Bidirectional"}
default{$TrustType = "Unknown"}
}
$TrustType = $Trust.TrustType
switch ($TrustType)
{
1 {$TrustType = "Downlevel"}
2 {$TrustType = "Uplevel"}
3 {$TrustType = "Kerberos realm"}
4 {$TrustType = "DCE"}
default{$TrustType = "Unknown"}
}
$TrustStatus = $Trust.TrustIsOk
$TrustStatusString = $Trust.TrustStatusString
$TrustObject = New-Object -TypeName psobject
Add-Member -InputObject $TrustObject -MemberType NoteProperty -Name SourceDomain -Value "$SourceDomainName"
Add-Member -InputObject $TrustObject -MemberType NoteProperty -Name SourceDomainFunctionalLevel -Value "$SourceDomainFunctonalLevel"
Add-Member -InputObject $TrustObject -MemberType NoteProperty -Name SourceForestFunctionalLevel -Value "$SourceForestFunctionalLevel"
Add-Member -InputObject $TrustObject -MemberType NoteProperty -Name TrustedDomain -Value "$TrustedDomain"
Add-Member -InputObject $TrustObject -MemberType NoteProperty -Name NETBIOSName -Value "$NETBIOSName"
Add-Member -InputObject $TrustObject -MemberType NoteProperty -Name TargetDomainFunctonalLevel -Value "$TargetDomainFunctionalLevel"
Add-Member -InputObject $TrustObject -MemberType NoteProperty -Name TargetForestFunctionalLevel -Value "$TargetForestFunctionalLevel"
Add-Member -InputObject $TrustObject -MemberType NoteProperty -Name TrustedDCName -Value "$TrustedDCName"
Add-Member -InputObject $TrustObject -MemberType NoteProperty -Name TrustDirection -Value "$TrustDirection"
Add-Member -InputObject $TrustObject -MemberType NoteProperty -Name TrustType -Value "$TrustType"
Add-Member -InputObject $TrustObject -MemberType NoteProperty -Name TrustStatus -Value "$TrustStatus"
Add-Member -InputObject $TrustObject -MemberType NoteProperty -Name TrustStatusString -Value "$TrustStatusString"
$TrustContainer += $TrustObject
}
}
}
}
$TrustContainer | Export-Csv -Path $Report -NoTypeInformation -ErrorAction SilentlyContinue 