3.1.1.3.2.35 dsaVersionString

msdn link

Returns a string indicating the version of Active Directory running on the DC. For instance, when running Windows Server 2008 operating system Beta 2, the Active Directory version string is "6.0.5384.32 (winmain_beta2.060727-1500)".

This rootDSE attribute is readable by Domain Administrators (section 6.1.1.6.5) and Enterprise Administrators (section 6.1.1.6.10) only.