Unauthenticated Enumeration

Assess whether Active Directory domain information is exposed without valid user credentials through anonymous/null-session or empty LDAP-bind behavior, and through Guest-session access only where the target accepts it. The listed SMB, RPC and LDAP checks are alternative paths with different service and policy prerequisites, not a required sequence. A successful result shows only the objects exposed through that path; denied or empty output does not prove the domain has no accounts or shares.