how to verify a machine is a DC

[ronnie sahlberg]

If you dont have netbios, then you have AD.

you can try a cldap ping to the host and if it is an AD dc it will
respond back to you and tell you which domain it belongs to.

you can also search DNS for the _ldap SRV record for the domain. the
dns server should return the name and ip address of all DCs for the
entire domain.
if the host is not in the DNS records returned it is not an AD dc.


On Sat, Feb 23, 2008 at 5:46 AM, Herb Lewis <hlewis at panasas.com> wrote:
> What is the best (most reliable) way to verify that a
>  particular machine is a DC for a given domain? Particularly
>  when NetBIOS over TCP has been disabled on that DC.
>
>  I used to use nmblookup for the <domain>#1c name but that
>  will not work if NetBIOS is disabled so I'm looking for
>  a way that will work in both situations.
>