There is an option inside the Netscan tool that allow us to enumerate user accounts in remote machines. It works fine, but the problem is that it only works for some machines and others I don't know why it is not bringing the users. My question is what is the technique used to gather this users in local machine?
I tried to allow through WMI win32_UserAccount but it isn't this technique that is used. I also thought this could be the same procedure applied by Nmap script smbenumuser, but looks like that isn't this either.
I'm a little bit lost because I would like to understand how it is performed in order to allow this in the machines where it isn't working. Can you guys give me a help here?