Simple: How to list all DCs in a given domain

C:\Windows\system32>nltest /dclist

https://technet.microsoft.com/en-us/library/cc731935.aspx

Usage: nltest [/OPTIONS]
    /SERVER: - Specify

    /QUERY - Query netlogon service
    /REPL - Force partial sync on BDC
    /SYNC - Force full sync on BDC
    /PDC_REPL - Force UAS change message from PDC

    /SC_QUERY: - Query secure channel for on
    /SC_RESET:[\] - Reset secure channel for on to
    /SC_VERIFY: - Verify secure channel for on
    /SC_CHANGE_PWD: - Change a secure channel  password for on
    /DCLIST: - Get list of DC's for
    /DCNAME: - Get the PDC name for
    /DSGETDC: - Call DsGetDcName /PDC /DS /DSP /GC /KDC /TIMESERV /GTIMESERV /WS /NETBIOS /DNS /IP /FORCE /WRITABLE /AVOIDSELF /LDAPONLY /BACKG /DS_6 /TRY_NEXT_CLOSEST_SITE /SITE: /ACCOUNT: /RET_DNS /RET_NETBIOS
    /DNSGETDC: - Call DsGetDcOpen/Next/Close /PDC /GC /KDC /WRITABLE /LDAPONLY /FORCE /SITESPEC
    /DSGETFTI: - Call DsGetForestTrustInformation /UPDATE_TDO
    /DSGETSITE - Call DsGetSiteName
    /DSGETSITECOV - Call DsGetDcSiteCoverage
    /DSADDRESSTOSITE:[MachineName] - Call DsAddressToSiteNamesEx /ADDRESSES:
    /PARENTDOMAIN - Get the name of the parent domain of this machine
    /WHOWILL:* [] - See if will log on
    /FINDUSER: - See which trusted domain will log on
    /TRANSPORT_NOTIFY - Notify netlogon of new transport
    /DBFLAG: - New debug flag
    /USER: - Query User info on
    /TIME: - Convert NT GMT time to ascii
    /LOGON_QUERY - Query number of cumulative logon attempts
    /DOMAIN_TRUSTS - Query domain trusts on /PRIMARY /FOREST /DIRECT_OUT /DIRECT_IN /ALL_TRUSTS /V
    /DSREGDNS - Force registration of all DC-specific DNS records
    /DSDEREGDNS: - Deregister DC-specific DNS records for specified DC
    /DOM: /DOMGUID: /DSAGUID:
    /DSQUERYDNS - Query the status of the last update for all DC-specific DNS records
    /BDC_QUERY: - Query replication status of BDCs for
    /LIST_DELTAS: - display the content of given change log file
    /CDIGEST: /DOMAIN: - Get client digest
    /SDIGEST: /RID: - Get server digest
    /SHUTDOWN: [] - Shutdown for
    /SHUTDOWN_ABORT - Abort a system shutdown

https://technet.microsoft.com/en-us/library/cc731935.aspx?f=255&MSPPError=-2147217396