During an internal assessment, you gain access to a low-privilege domain user account on a Windows workstation. You want to enumerate all computer objects in the Active Directory domain without dropping additional tools or triggering AV that flags known binaries. Which approach best supports this goal using native capabilities already present on the host?