Enumerate Domain Password Policy

Using the option --pass-pol you can get the password policy of the domain

nxc smb <CIDR> -u <USERNAME> -p <PASSWORD> --pass-pol