Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

As an authenticated Active Directory user, I can run this to get the domain GUID (objectGUID):

dsquery * "DC=lab,DC=local" -scope base -attr objectguid

I can use this command in Linux to get the domain (lab.local) SID from the domain controller labdc01 without an account (anonymously):

# rpcclient -U% labdc01.lab.local -c lsaquery
Domain Name: LAB 
Domain Sid: S-1-5-21-3869872838-1836277878-698564084

If I know the GUID, I can fetch it from DNS:

How can I get the domain objectGUID anonymously (like the SID example above)?

share|improve this question

By default:

You can't

With Active Directory, for any anynymous LDAP operation (apart from RootDSE binds) to succeed, you would need to:

  1. Enable anonymous binds
  2. Allow Anonymous access to public properties
share|improve this answer
Thank you! Then I know that it is not possible via LDAP. Your reply excludes other options. Theoretically it is possible via DNS. You can get the SID without LDAP (with lsaquery) anonymously. – Mattias Ohlsson Jun 16 '14 at 18:21

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.