Share via

Run AD Users & Computers As Another User

  • Article

Question

Monday, May 5, 2008 9:44 PM

 

I would like to be able to run two sessions of Users & Computers MMC (2008 AD) with different credentials.  Example - I log into and am a domain admin on Domain "A" but also need to perform duties as an OU admin on Domain "B".  Although trusts have been set up between the domains, no administrative duties cross the trust.  I must login to "B" using credentials from "B". 

 

It would be extra nice to be able to have shortcuts that will take me to each domain when clicked.  Anyone know of a way to do that?

All replies (2)

Tuesday, May 6, 2008 12:57 AM ✅Answered | 1 vote

 

On a elevated command prompt run this....

 

        runas /u:<domainB>\username> /netonly mmc

 

On prompt.. type your domainB password.

 

Click File --> Add/Remove Snap-in

Choose Active Directory Users and Computers (from left side pane)

Click Add >

Click Ok

 

On the Console Root tree (it is on the Left hand side of the snapin)

Click Console Root --> Active Directory Users and Computer

 -- It may show an error dialog saying invalid creds etc.

Right click on it  and select Change Domain Controller... menu

On Change Directory Server dialog

    .. Select "This Domain Controller or AD LDS Instance" option

    .. On the first row of the table... click your mouse (or press F2) this should make the box editable

    .. Type the DC name

Click Ok

 

 

And you are connected to the domain you want. This works even if you dont have any trust with the other domain.

 

I am not sure about the shortcut part though.

 

Thanks,

 

Tuesday, May 6, 2008 5:00 PM ✅Answered

 

I haven't tested this, but it should work.

 

Create a shortcut on the desktop that contains a line very similar to what Swaminathan gives above, only specify a .msc file that already has the MMC prepopulated with your settings that he is manually setting:

 

runas /u:<domainB>\username> /netonly "mmc yourmsc.msc"

 

Call that shortcut by the name of the machine you want to connect to.  Right click on the shortcut and click Properties and select Advanced.  That option gives you the ability to run as Administrator, which is needed.

 

Playing with the settings in the yourmsc.msc file for each machine, you may be able to tailor things to what you want.

 

Again, I haven't tested this, but I played a little bit with it and it looks like it might get you started in the right direction.

 

tgc