Use rpc null sessions to retrieve machine list, domain admin list, domain controllers - View it on GitHub