title: Getting Netlogon information with an ADSI script
body: <p>The following screenshot shows a snippet of network communication as sniffed by Wireshark. It is a part of the login process, where a domain-joined client tries to login to a Windows Server 2008 R2 (which is the domain controller). The protocol used is Connectionless LDAP (CLDAP), also known as LDAP Ping.</p>
  
  <p><img src="https://i.stack.imgur.com/c9u55.png" alt="Active Directory Communication - Sniffed by Wireshark"></p>
  
  <p>Sample response:</p>
  
  <p><img src="https://i.stack.imgur.com/VtS0J.png" alt="enter image description here"></p>
  
  <p>It seems that the query is trying to get some "filtered" information regarding the "Netlogon" attribute.
  This attribute is documented here:
  <a href="http://msdn.microsoft.com/en-us/library/cc223260.aspx" rel="nofollow noreferrer">http://msdn.microsoft.com/en-us/library/cc223260.aspx</a></p>
  
  <p>Moreover, as described in <a href="http://msdn.microsoft.com/en-us/library/cc223254.aspx" rel="nofollow noreferrer">http://msdn.microsoft.com/en-us/library/cc223254.aspx</a>, this attribute is operational, meaning that:</p>
  
  <blockquote>
    <p>... the server returns the attribute only when it is explicitly requested.</p>
  </blockquote>
  
  <p>I tried to write a simple ADSI script to get more info about this attribute, but I got an error. Here's the script:</p>
  
  <pre><code>Set obj = GetObject("LDAP://rootDSE")
  
  attArray = Array("netlogon") 
  obj.GetInfoEx attArray, 0
  WScript.Echo obj.netlogon
  </code></pre>
  
  <ul>
  <li>Error message: Object doesn't support this property or method: 'obj.netlogon'.</li>
  <li>Error code: 800A01B6</li>
  </ul>
  
  <p>Could you please help me with the script?</p>