Windows Computer Primary Group IDs
- 515 – Domain Computers
- 516 – Domain Controllers (writable)
- 521 – Domain Controllers (Read-Only)
Domain Computers (Workstation & Servers – No Domain Controllers)
Import-Module ActiveDirectory
Get-ADComputer -Filter {PrimaryGroupID -eq 515}
Domain Controllers (All)
Import-Module ActiveDirectory
Get-ADComputer -Filter {PrimaryGroupID -ne 516}
Domain Controllers (RODCs only)
Import-Module ActiveDirectory
Get-ADComputer -Filter {PrimaryGroupID -eq 521}