You could try DsGetDomainControllerInfo with the domain name, I believe.