For Linux, this command should return the DNS record for the LDAP server

host -t srv _ldap._tcp.DOMAINNAME

(found at Authenticating from Java (Linux) to Active Directory using LDAP WITHOUT servername)

How could I get the same on the Windows command line using nslookup?

I tried

nslookup -type srv _ldap._tcp.DOMAINNAME

(following http://support.microsoft.com/kb/200525), would this be correct?

7 Answers 7


You need to use an = after -type:

nslookup -type=srv _ldap._tcp.DOMAINNAME
  • 2
    still can't get
    – ilhnctn
    Mar 13, 2013 at 7:09

In cmd shell:

set types=all
  • 8
    Or, in one line nslookup -type=all _ldap._tcp. Wanted so I could redirect output to a file.
    – dsz
    Jul 27, 2016 at 0:58

None of the above worked for me, I got every time an error like this (I've tried with all the combinations I can think of with the domain names):

*** Unknown can't find _ldap._tcp: Non-existent domain

So another google search pointed to this method:

nltest /dclist:yourdomain.com

And this results in the list of the different servers in my network. Hope this saves an additional 2 minutes for someone else.

  • nltest returned the correct information when using the "short" domain name, this short name did not resolve on the nslookup query Oct 25, 2019 at 9:07

How to verify Service Location (SRV) locator resource records for a domain controller after you install the Active Directory directory service.

Use Nslookup to verify the SRV records, follow these steps:

  1. Click Start, and then click Run.

  2. In the Open box, type cmd.

  3. Type nslookup, and then press ENTER.

  4. Type set type=all, and then press ENTER.

  5. Type _ldap._tcp.dc._msdcs.Domain_Name, where Domain_Name is the name of your domain, and then press ENTER.


Get-ADDomainController will list your domain controllers from domain If you want to check it from another domain then use -server switch.

get-addomaincontroller -server "domain"

Windows cmd prompt uses "query" instead of "type" for some forsaken reason. Interactive nslookup still uses "set type=srv".

nslookup -query=srv _ldap._tcp.DOMAINNAME

EDIT: while "query" works it seems that I am 100% wrong. "type" works too.

  • Are you sure about that? nslookup -type=srv _ldap._tcp.DOMAINNAME works as expected on Windows.
    – jscott
    Sep 7, 2014 at 4:29

"nslookup -query=srv _ldap._tcp.DOMAINNAME" worked for me, tried nslookup -type=srv _ldap._tcp.DOMAINNAME and didn't work.

Server 2008 R2

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.