What is the best (most reliable) way to verify that a particular machine is a DC for a given domain? Particularly when NetBIOS over TCP has been disabled on that DC. I used to use nmblookup for the <domain>#1c name but that will not work if NetBIOS is disabled so I'm looking for a way that will work in both situations.