dc=tools

Decode a RootDSE

Every directory describes itself in its RootDSE. Paste one and every OID, level and naming context is named, with the server's role, site and domain picked out. Everything runs in your browser, so nothing you paste leaves your machine. The page's Content-Security-Policy also stops it from sending anything, which you can check in its source.

Decode a RootDSE

Sample

Paste the output of any of these. The format is worked out for you, and reading the RootDSE needs no credentials, since a directory answers it before any bind.

ldapsearch -H ldap://dc1 -x -b "" -s base "(objectClass=*)" "*" "+"

$FormatEnumerationLimit = -1; Get-ADRootDSE | Format-List *

ldp.exe: Connection, Connect. The RootDSE prints as soon as it connects.