Connecting to Active Directory and other services from PC
As an MSP, I regularly need to connect to services running on client servers. I often will just connect to a server or management PC setup on the client environment, but it's also really easy to use the RSAT tools on my laptop with a simple command.
You probably already know that you can use the runas
command to run a program with administrative privileges, but with a simple flag, you can use network credentials:
runas /netonly /user:CONTOSO\jsmith mmc.exe
After entering in the password for the domain account, you'll now have an instance of MMC running. Add the snap-in that you want, and it will use the domain credentials to launch.
For some snap-ins will prompt for which computer to use to run the snap-in when you add it, but others, like Active Directory Users and Computers, you have to select the domain controller after loading the snap-in. To do so, add the snap-in and then right click on Active Directory Users and Computers and click "Change Domain Controller".
In the new windows, enter the domain controller you want to connect to and then click Ok. That's it, now you're in to Active Directory Users and Computers and you don't need to jump onto the desktop of the server.