Other tools

NBTScan

nbtscan -r <IP>

Enum4linux

enum4linux -a <IP>

rpcclient

rpcclient -U "" <ip>

srvinfo
enumdomusers
getdompwinfo
querydominfo
netshareenum
netshareenumall