DNS Lookup for BDC



How can I locate a host that is an authority for a specific NT domain
name (or realm name)? This used to be done using a 0x1C WINS query for
the NT domain name but since WINS is deprecated I would like to know
how to lookup the BDC or PDC using DNS.

I know the KDC may be located using the realm in an SRV query for:

_kerberos._udp.dc._msdcs.<realm>

and I know Active Directory may be located using:

_ldap._tcp.dc._msdcs.<realm>

but is it always ok to query these machines for mundane SAM account
information?

Thanks,
Mike

.