Use the get_zones command to check Active Directory and return a Tcl list of zones within a specified domain. Note that this does not include computer-specific override zones or computer roles.

Zone type

Classic and hierarchical


get_zones domain




This command takes no options.


This command takes the following argument:

Argument Type Description



Required. Specifies the name of the domain for which to return zones.

Return value

This command returns a Tcl list with the distinguished name for each zone in the specified domain.



This example returns the list of zones in the domain:

CN=childzone1,CN=Zones,CN=Centrify,CN=Program Data,DC=acme,DC=com CN=childzone2,CN=Zones,CN=Centrify,CN=Program Data,DC=acme,DC=com CN=global,CN=Zones,CN=Centrify,CN=Program Data,DC=acme,DC=com

Related commands

The following commands perform actions related to this command:

  • create_zone creates a new zone in Active Directory.
  • select_zone retrieves a zone from Active Directory and stores it in memory.

After you have a zone stored in memory, you can use the following commands to work with that zone:

  • delegate_zone_right delegates a zone use right to a specified user or computer.
  • delete_zone deletes the selected zone from Active Directory and memory.
  • get_child_zones returns a Tcl list of child zones, computer roles, or computer zones.
  • get_zone_field reads a field value from the currently selected zone.
  • get_zone_nss_vars returns the NSS substitution variable for the selected zone.
  • save_zone saves the selected zone with its current settings to Active Directory.
  • set_zone_field sets a field value in the currently selected zone.