Required permissions

To list all the domains in a forest, use an account that is a member of the Enterprise Admins group in Active Directory.