# Domain

<table><thead><tr><th width="268">Field</th><th>Type</th><th width="166">Possible Operators</th><th>Description</th></tr></thead><tbody><tr><td><strong>Guid</strong></td><td>TEXT</td><td><code>LIKE</code>,<code>NOT_LIKE EQUAL</code>,<code>NOT_EQUAL</code>,<code>IS_EMPTY</code></td><td>A unique identifier that is a combination of GUID of selected <code>Scan</code> and Active Directory <code>ObjectGUID</code> of the object.</td></tr><tr><td><strong>FSName</strong></td><td>TEXT</td><td><code>LIKE</code>,<code>NOT_LIKE EQUAL</code>,<code>NOT_EQUAL</code>,<code>IS_EMPTY</code></td><td>Fully Qualified Domain Name of the Domain.</td></tr><tr><td><strong>ObjectSid</strong></td><td>TEXT</td><td><code>LIKE</code>,<code>NOT_LIKE EQUAL</code>,<code>NOT_EQUAL</code>,<code>IS_EMPTY</code></td><td>Active Directory security identifier of object. (<strong>Ldap Display Name</strong>: objectSid)</td></tr><tr><td><strong>Name</strong></td><td>TEXT</td><td><code>LIKE</code>,<code>NOT_LIKE EQUAL</code>,<code>NOT_EQUAL</code>,<code>IS_EMPTY</code></td><td>Name of the specified object. (<strong>Ldap Display Name</strong>: name)</td></tr><tr><td><strong>DistinguishedName</strong></td><td>TEXT</td><td><code>LIKE</code>,<code>NOT_LIKE EQUAL</code>,<code>NOT_EQUAL</code>,<code>IS_EMPTY</code></td><td>Active Directory distinguished name of the object. (<strong>Ldap Display Name</strong>: distinguishedName)</td></tr><tr><td><strong>FSMORoleOwner</strong></td><td>TEXT</td><td><code>LIKE</code>,<code>NOT_LIKE EQUAL</code>,<code>NOT_EQUAL</code>,<code>IS_EMPTY</code></td><td>Flexible Single-Master Operation: The distinguished name of the DC where the schema can be modified. (<strong>Ldap Display Name</strong>: fSMORoleOwner)</td></tr><tr><td><strong>WhenChanged</strong></td><td>DATE</td><td><code>SMALLER</code>, <code>LARGER</code>, <code>BETWEEN</code>, <code>EQUAL</code></td><td>The date when this object was last changed. (<strong>Ldap Display Name</strong>: whenChanged)</td></tr><tr><td><strong>MsDSMachineAccountQuota</strong></td><td>NUMBER</td><td><code>EQUAL</code>, <code>BETWEEN</code>, <code>SMALLER</code>, <code>LARGER</code>, <code>SMALLER_EQUAL</code>, <code>LARGER_EQUAL</code></td><td>The number of computer accounts that a user is allowed to create in a domain. (<strong>Ldap Display Name</strong>: ms-DS-MachineAccountQuota)</td></tr><tr><td><strong>WhenCreated</strong></td><td>DATE</td><td><code>SMALLER</code>, <code>LARGER</code>, <code>BETWEEN</code>, <code>EQUAL</code></td><td>The date when this object was created. (<strong>Ldap Display Name</strong>: whenCreated)</td></tr><tr><td><strong>LockoutThreshold</strong></td><td>NUMBER</td><td><code>EQUAL</code>, <code>BETWEEN</code>, <code>SMALLER</code>, <code>LARGER</code>, <code>SMALLER_EQUAL</code>, <code>LARGER_EQUAL</code></td><td>The number of invalid logon attempts that are permitted before the account is locked out. (<strong>Ldap Display Name</strong>: lockoutThreshold)</td></tr><tr><td><strong>DomainMode</strong></td><td>TEXT</td><td><code>LIKE</code>,<code>NOT_LIKE EQUAL</code>,<code>NOT_EQUAL</code>,<code>IS_EMPTY</code></td><td>The operating mode of the domain. (<a href="https://learn.microsoft.com/en-us/dotnet/api/system.directoryservices.activedirectory.domainmode?view=windowsdesktop-7.0">Field reference</a>)</td></tr><tr><td><strong>MinPwdLength</strong></td><td>NUMBER</td><td><code>EQUAL</code>, <code>BETWEEN</code>, <code>SMALLER</code>, <code>LARGER</code>, <code>SMALLER_EQUAL</code>, <code>LARGER_EQUAL</code></td><td>The minimum number of characters that a password must contain. (<strong>Ldap Display Name</strong>: minPwdLength)</td></tr><tr><td><strong>DomainModeLevel</strong></td><td>NUMBER</td><td><code>EQUAL</code>, <code>BETWEEN</code>, <code>SMALLER</code>, <code>LARGER</code>, <code>SMALLER_EQUAL</code>, <code>LARGER_EQUAL</code></td><td>The operating mode level of the domain. (<a href="https://learn.microsoft.com/en-us/openspecs/windows_protocols/ms-adts/6dd88965-8feb-4369-ae7e-075985da8071">Field Reference</a>)</td></tr><tr><td><strong>risk</strong></td><td>NUMBER</td><td><code>EQUAL</code>, <code>BETWEEN</code>, <code>SMALLER</code>, <code>LARGER</code>, <code>SMALLER_EQUAL</code>, <code>LARGER_EQUAL</code></td><td>The risk score of the object that calculated based on vulnerability counts and severities.</td></tr><tr><td><strong>IsEnumerable</strong></td><td>BOOLEAN</td><td><code>N/A</code></td><td>Indicates the FSProtect enumeration status of the domain.</td></tr><tr><td><strong>PwdProperties</strong></td><td>NUMBER</td><td><code>EQUAL</code>, <code>BETWEEN</code>, <code>SMALLER</code>, <code>LARGER</code>, <code>SMALLER_EQUAL</code>, <code>LARGER_EQUAL</code></td><td>A bitfield to indicate complexity and storage restrictions. (<strong>Ldap Display Name</strong>: pwdProperties) (<a href="https://learn.microsoft.com/en-us/windows/win32/adschema/a-pwdproperties">Field Reference</a>)</td></tr><tr><td><strong>IsRecycleBinEnabled</strong></td><td>BOOLEAN</td><td><code>N/A</code></td><td>Indicates whether the recycle bin is activated for the domain.</td></tr><tr><td><strong>IsRootDomain</strong></td><td>BOOLEAN</td><td><code>N/A</code></td><td>Indicates whether the domain is the root of the forest.</td></tr><tr><td><strong>PwdHistoryLength</strong></td><td>NUMBER</td><td><code>EQUAL</code>, <code>BETWEEN</code>, <code>SMALLER</code>, <code>LARGER</code>, <code>SMALLER_EQUAL</code>, <code>LARGER_EQUAL</code></td><td>The number of old passwords to save. (<strong>Ldap Display Name</strong>: pwdHistoryLength)</td></tr><tr><td><strong>InfrastructureRoleOwner</strong></td><td>TEXT</td><td><code>LIKE</code>,<code>NOT_LIKE EQUAL</code>,<code>NOT_EQUAL</code>,<code>IS_EMPTY</code></td><td>Domain controller that holds the infrastructure owner role.</td></tr><tr><td><strong>RidRoleOwner</strong></td><td>TEXT</td><td><code>LIKE</code>,<code>NOT_LIKE EQUAL</code>,<code>NOT_EQUAL</code>,<code>IS_EMPTY</code></td><td>Domain controller that holds the relative identifier (RID) master role for this domain.</td></tr><tr><td><strong>NetbiosName</strong></td><td>TEXT</td><td><code>LIKE</code>,<code>NOT_LIKE EQUAL</code>,<code>NOT_EQUAL</code>,<code>IS_EMPTY</code></td><td>The name of the object to be used over NetBIOS. (<strong>Ldap Display Name</strong>: nETBIOSName)</td></tr><tr><td><strong>PdcRoleOwner</strong></td><td>TEXT</td><td><code>LIKE</code>,<code>NOT_LIKE EQUAL</code>,<code>NOT_EQUAL</code>,<code>IS_EMPTY</code></td><td>Domain controller that holds the primary domain controller (PDC) for this domain.</td></tr><tr><td><strong>ExposurePoint</strong></td><td>NUMBER</td><td><code>EQUAL</code>, <code>BETWEEN</code>, <code>SMALLER</code>, <code>LARGER</code>, <code>SMALLER_EQUAL</code>, <code>LARGER_EQUAL</code></td><td><strong>ExposurePoint</strong>: A numerical value indicating the level of risk or exposure.</td></tr></tbody></table>


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.forestall.io/fsprotect/search-and-reports/domain.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.