I have been running this command in our test domain:
And have found that amongst all the valid results, it also returns several servers that definitely do not have SQL server installed. It is possible they may have had SQL installed on then in the distant past, but definitely not currently.
How is this possible? I would have thought SQL Browser would have to be installed and running on a server for it to respond to the sqlcmd -L broadcast.
In case it helps, the servers that are false positives are: -a domain controller -a server for Microsoft SCCM -a server for PKI management