Using enum4linux:
enum4linux -U 172.16.5.5 | grep "user:" | cut -f2 -d"[" | cut -f1 -d"]"
Using rpcclient:
rpcclient -U "" -N 172.16.5.5
Using CME:
crackmapexec smb 172.16.5.5 --users
Using LDAP anonymous:
ldapsearch -h 172.16.5.5 -x -b "DC=INLANEFREIGHT,DC=LOCAL" -s sub "(&(objectclass=user))" | grep sAMAccountName: | cut -f2 -d" "
Using windapsearch:
./windapsearch.py --dc-ip 172.16.5.5 -u "" -U
using kerbrute:
kerbrute userenum -d inlanefreight.local --dc 172.16.5.5 /opt/jsmith.txt