rpcclient

rpcclient -U "" -N 10.10.10.169

Commands to use:

  • querydispinfo
  • enumdomusers
  • enumdomgroups
  • querygroup 0x201
  • querygroupmem 0x201
  • queryuser 0x174