Question: how to find read only domain controller?
Answer: Without the AD module you can search for read-only domain controllers by querying their primaryGroupID attribute (primary group). RODCs will have a value of 521 which is the “Read-only Domain Controllers” built-in AD group (writable DCs have the primaryGroupID set to 516, which is the “Domain Controllers” group).