In the Open

rpcclient

rpcclient -U% $TARGET_IP
  • Input commands, attributes count for the current user on the machine
enumdomusers
enumdomains
enumprivs