# Sites without subnet associations details should be retrievable

Sites without subnets represent incomplete configuration that can lead to:

Source: https://maester.dev/docs/tests/AD-SITE-05

<!-- This file is generated by website/scripts/generate-test-docs.mjs. Do not edit manually. -->

<div class="test-byline"><div class="test-byline-avatars"><a class="test-byline-avatar test-byline-avatar--author" href="/contributors/soulemike" title="Michael Soule · Original author"><img src="https://github.com/soulemike.png" alt="Michael Soule" width="28" height="28" loading="lazy" decoding="async" /></a></div><div class="test-byline-meta"><span class="test-byline-text">Contributed by <a href="/contributors/soulemike">Michael Soule</a></span><a class="test-byline-link" href="/contributors">All contributors →</a></div></div>

<p class="test-part">Part of <a href="/docs/tests/ad">Active Directory</a> · Active Directory · Sites and subnets · <a href="/docs/tests">All checks</a></p>

```powershell title="Run this check"
Invoke-Maester -TestId AD-SITE-05
```

## Overview

Sites without subnets represent incomplete configuration that can lead to:

- **Client mislocation**: Computers may authenticate to incorrect DCs
- **Replication inefficiency**: Site topology doesn't guide replication paths
- **Service location failures**: Clients cannot locate local services
- **Administrative confusion**: Sites exist but cannot be used

Identifying and resolving these configuration gaps ensures the site topology functions correctly.

#### Control Type

**Operational**

#### Security Recommendation

For each site without subnets:
1. Determine if the site represents an active location
2. If active, assign appropriate subnet(s) to the site
3. If inactive, consider deleting the site
4. Document the purpose of each site
5. Validate that subnet assignments match actual network topology

#### How the Test Works

This test retrieves all sites and subnets, identifies sites with no subnet associations, and lists them with their descriptions.

#### Related Tests

- `Test-MtAdSiteWithoutSubnetCount` - Counts sites without subnets
- `Test-MtAdSubnetWithoutSiteCount` - Counts orphaned subnets
- `Test-MtAdSiteTotalCount` - Counts total sites in the domain

## Details

<details>
<summary>Every attribute of this check</summary>

| Field | Value |
| --- | --- |
| Test ID | AD-SITE-05 |
| Severity | Info |
| Suite | Active Directory |
| Product | Active Directory |
| Feature | Sites and subnets |
| Area | Infrastructure hardening |
| Resource type | AdSite |
| MITRE ATT&CK | None |
| PowerShell test | [Test-MtAdSiteWithoutSubnetDetails](https://github.com/maester365/maester/blob/main/tests/ad/site/Test.AD-SITE-05.ps1) |
| Services | ActiveDirectory |
| Permissions | ActiveDirectory:Ldap:site:ReadProperty, ActiveDirectory:Ldap:subnet:ReadProperty |

</details>

## Source

- Test: [`tests/ad/site/Test.AD-SITE-05.ps1`](https://github.com/maester365/maester/blob/main/tests/ad/site/Test.AD-SITE-05.ps1)
- Documentation: [`tests/ad/site/Test.AD-SITE-05.md`](https://github.com/maester365/maester/blob/main/tests/ad/site/Test.AD-SITE-05.md)