This command retrieves the Password Settings Objects (PSO), which are used to define password policies in AD. If misconfigured, these could allow an attacker to bypass certain password requirements.
nxc ldap IP -u administrator -p Password@987 -M pso