Which command can help confirm FSMO roles in a Windows environment?

• A. Get-ADDomainController
• B. Get-ADForest
• C. Check-ADUser
• D. Set-ADComputer

Answer: (B)

The command that confirms FSMO (Flexible Single Master Operation) roles in a Windows environment is indeed the one that can retrieve information related to the entire Active Directory forest. Specifically, the Get-ADForest command is designed to provide detailed information about the forest and includes the FSMO role holders. This command can return various attributes about the forest, including the names of the domain controllers that hold each of the five FSMO roles: Schema Master, Domain Naming Master, PDC Emulator, Relative ID Master, and Infrastructure Master.

The other options do not serve this specific function. For example, Get-ADDomainController retrieves information related to domain controllers, but it does not explicitly list FSMO roles. Check-ADUser is focused on retrieving information about Active Directory users and would not provide any FSMO role details. Set-ADComputer is used for modifying properties of computer accounts in Active Directory, which is unrelated to confirming FSMO role assignments. Thus, Get-ADForest is the most appropriate command to ascertain the FSMO roles in a Windows environment.