This is how you find all the domain controllers in Active Directory.

dig +short srv _ldap._tcp.active.domain

here .domain part is your domain. Ex: ad.us.domain.org