It seems that running
certutil.exe -DCInfo Verify will check the certificates for all domain controllers in the domain of the logged-in user account.
In our AD forest, we have a handful of domains. I only have a unique account in two of them, but have administrative permissions over all of them.
Is there a way I can run the command to target a different domain than the one I'm logged into, or do I really have to have an account in each one?!
Alternately, is there another way to accomplish the same goal?