Enumerating Domain Controllers

PowerView

Get details about Domain Controller of current domain

Get-NetDomainController

Get details about Domain Controller of another domain

Get-NetDomainController -Domain <DOMAIN NAME>

Get Domain Controller's Name of current domain

(Get-NetDomainController).Name

Get Domain Controller's Name of another domain

(Get-NetDomainController -Domain <DOMAIN NAME> ).Name

Get Domain Controller's IP Address of current domain

(Get-NetDomainController).IPAddress

Get Domain Controller's IP Address of another domain

(Get-NetDomainController -Domain <DOMAIN NAME> ).IPAddress

Active Directory Module

Get details about Domain Controller of current domain

Get-ADDomainController

Get details about Domain Controller of current domain using Active Directory Module

Get-ADDomainController -DomainName <DOMAIN NAME> -Discover

Get Domain Controller's Name of current domain

(Get-ADDomainController).HostName

Get Domain Controller's Name of another domain

(Get-ADDomainController -DomainName <DOMAIN NAME> -Discover).HostName

Get Domain Controller's IP Address of current domain

(Get-ADDomainController).IPv4Address

Get Domain Controller's IP Address of another domain

(Get-ADDomainController -DomainName <DOMAIN NAME> -Discover).IPv4Address

Get Domain Controller's Operating System and its version for current domain

(Get-ADDomainController).OperatingSystem
(Get-ADDomainController).OperatingSystemVersion

Get Domain Controller's Roles of current domain

(Get-ADDomainController).OperationMasterRoles