Using crackmapexec

We can use a valid creds to enumerate password policy through crackmapexec

crackmapexec smb 172.16.5.5 -u avazquez -p Password123 --pass-pol