Find Domain Controllers using NSLOOKUP

C:\Windows>nslookup
> set q=srv
> _ldap._tcp.dc._msdcs.example.com
 
Where example.com is your domain.