Admin Count

adminCount Indicates that a given object has had its ACLs changed to a more secure value by the system because it was a member of one of the administrative groups (directly or transitively).

This will get you all user objects with the adminCount attribute set to 1:

nxc ldap 192.168.255.131 -u adm -p pass --admin-count

If you want all objects in ldap you can query them manually:

nxc ldap 192.168.255.131 -u adm -p pass --query "(adminCount=1)" "sAMAccountName"

https://troopers.de/downloads/troopers19/TROOPERS19_AD_Fun_With_LDAP.pdftroopers.de