title: Retrieve badpwdcount with LDAP on PDC
body: <p>I'm trying to get the values from "badpwdcount" attribute. Problem is in order to get accurate value I should query to PDC ( Primary Domain Controller ). At the moment, I'm using powershell to solve with LDAP search. The question : Is there any chance to get the value from PDC by using LDAP search?</p>
  
  <p>For example:</p>
  
  <pre><code>$D = [System.DirectoryServices.ActiveDirectory.Domain]::GetCurrentDomain()
  $Domain = [ADSI]"LDAP://$D"
  $ADSearch = New-Object System.DirectoryServices.DirectorySearcher
  $ADSearch.SearchRoot ="LDAP://$Domain
  </code></pre>
  
  <p>This will search for the current domain. What should I do to get values from PDC?</p>