Use rpccli_samr_EnumDomainUsers in net and rpcclient.