Connect to a remote host on a domain without a password

MS-RPC client tool (part of the samba suite).
More information: <https://www.samba.org/samba/docs/current/man-html/rpcclient.1.html>.
Trick copyright: tl;dr; <https://github.com/tldr-pages/tldr>

rpcclient --user {{username}} --workgroup {{domain}} --no-pass {{ip}}

click the source code to copy install rpcclient on any operating system with command-not-found.com