rpc

rpcclient  -U '' IP #test password null authentication
> enumdomusers #lists users
> querydispinfo # more in-depth info about users