> For the complete documentation index, see [llms.txt](https://www.netexec.wiki/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://www.netexec.wiki/ldap-protocol/enumerate-ous.md).

# Enumerate Domain OUs

Enumerate all OUs in the Domain:

```bash
nxc ldap <ip> -u <username> -p <password> --ous
```

To enumerate all members in specific OU via LDAP:

```bash
nxc ldap <ip> -u <username> -p <password> --ous "Domain Controllers"
```