Enumerate Domain Users

Enumerate domain users on the remote target

nxc smb <target> -u <username> -p <password> --users

Export domain users on the remote target

nxc smb <ip> -u <username> -p <password> --users-export output.txt