New Active Directory Documents for IT Pros
Launching Tools Using Alternate Credentials from a Command Prompt Window
One of the easiest ways to launch tools using alternate credentials is to first launch a Command Prompt with the credentials you want to use. Once the Command Prompt is launched using the alternate credentials, all subsequent commands and tools run from that Command Prompt start using the elevated credentials you provided.
As an example, assume that you are logged on as a typical domain user to a workstation in the domain, but you needed to run several tools using a more privileged account. You could do the following:
Note: Instead of opening two different Command Prompt windows, you could run the following command from the Run dialog box cmd /k runas /user:<domain\username> cmd. For example, to open a Command Prompt as cgreen from the domain cpandl.com, you could run the following command: cmd /k runas /user:cpandl\cgreen cmd.
From here a new Command Prompt window opens with the credentials of the user account provided and you are prompted to type the password for the account. Once you enter the password for the account, you can run commands and launch additional tools from that Command Prompt window that will run using the credentials that you used to launch the window. For example, to run the Registry Editor, you could type regedit and press ENTER. To make use of the Command Prompt window to open graphical tools and snap-ins, you must know the name of the tools or their respective snap-ins.
The following list provides the tool’s full name followed by the name to type from the Command Prompt to launch the tool:
How to open an elevated Command Prompt in Windows Vista (http://www.winhelponline.com/articles/158/1/How-to-open-an-elevated-Command-Prompt-in-Windows-Vista.html)
How to use User Account Control (UAC) in Windows Vista (http://support.microsoft.com/default.aspx?scid=kb;EN-US;922708)
This posting is provided "AS IS" with no warranties, and confers no rights.
It would be useful to take this to the next step and provide information about how to set up shortcuts to open each of the AD tools using Elevated rights and run as a different user.
Or take this all the way, and allow Run As a Different User and Elevated rights to be set on a Start Menu item.