Your network contains an Active Directory domain named adatum.com. The domain contains several thousand
member servers that run Windows Server 2012 R2. All of the computer accounts for the member servers are in
an organizational unit (OU) named ServersAccounts. Servers are restarted only occasionally.
You need to identify which servers were restarted during the last two days.
What should you do?
A.
Run dsquery computer and specify the -sra /epwc parameter.
B.
Run Get-ADComputer and specify the SearchScope parameter.
C.
Run dsquery server and specify the -o parameter.
D.
Run Get-ADComputer and specify the lastLogon property
Explanation:
http://technet.microsoft.com/en-us/library/ee617192.aspx
SearchScope Specifies the scope of an Active Directory search. Possible values for this parameter are:
Base or 0
OneLevel or 1
Subtree or 2
A Base query searches only the current path or object.
A OneLevel query searches the immediate children of that path or object.
A Subtree query searches the current path or object and all children of that path or object.
http://technet.microsoft.com/en-us/library/cc732885%28v=ws.10%29.aspx
Dsquery server
-o {dn | rdn}
Specifies the format that dsquery uses to display the search results. A dn value displays the distinguished name
of each entry. An rdn value displays the relative distinguished name of each entry. The default value is dn.
NB: epwc doesn’t exist for Dsquery computer so even if i’m not sure it’s the best way, the only possible answer
is using “Get-ADComputer and specify the lastLogon property”