dsconfigad — retrieves/changes configuration for Active Directory

dsconfigad -show

dsconfigad -a compname -u domainadmin -domain contoso.lan

dsconfigad -localhome enable -useuncpath enable -groups "Domain Admins,Enterprise Admins" -alldomains enable

dsconfigad -f -r -u

https://gist.github.com/bzerangue/6886182
https://support.apple.com/en-gb/guide/directory-utility/diru11f4f748/mac
https://gist.github.com/bzerangue/6886182

dsmemberutil — various operations for the membership APIs, including state dump, check memberships, UUIDs, etc.

dsmemberutil getsid -U leo

get windows ACLs

-e Print the Access Control List (ACL) associated with the file, if present, in long (-l) output.

ls -lae /Volumes/stornextvolume/myfile