I believe the two user mapping methods are
WMI probing, and NetBIOS ProbingWMI Probing will send a probe to each learned IP address in a special list in order to map certain users to IP adress.
NetBIOS Probing will verivy which users are still valid to obtain Ip that has't mapped yet.