One Day Sec

What is the significance of the LDAP filter `(&(objectCategory=computer)(objectClass=computer))` when querying Active Directory?

This filter retrieves all computer objects in the domain. It is used in ldapsearch, PowerView’s `Get-NetComputer`, or the custom C++ tool to list every domain-joined machine. The combination of `objectCategory` and `objectClass` ensures only computer accounts are returned, not users, groups, or other object types.
LDAP filterobjectCategoryobjectClasscomputer enumerationGet-NetComputerdomain computers

Browse all Q&A →