Password Policy Enumeration

The passpol command can be used to enumerate the password policy of current or a target host. The optional argument takes in a target host. Any domain user can use this against a host in a domain without any special privilege.