RPC-BIND

>>> rpcinfo -p $IP

>>> >>> rpcclient -U "" $IP
srvinfo
enumdomusers
getdompwinfo
querydominfo
netshareenum
netshareenumall