AD Users and Computers

Discussion:

(too old to reply)

Leon

2008-01-08 19:54:03 UTC

Hi,
Is there a way I can open AD Users and Computers and connect to a domain if
the computer I am using is not part of that domain?

Maybe opening it from the command line and include the proper credentials in
the syntax...since I cant right click and connect to the domain or domain
controller because I get an access denied error.....

I have tried using `runas` but still get an error 1326...

I have tried: runas /user:<domain>\xxxxxx "dsa.msc /domain=<domain>" but it
doesnt work...

dsa.msc /domain=<domain> /user=xxxxxx doesnt work either...

any ideas?

Joe D

2008-01-08 20:04:58 UTC

Permalink

no, you cannot do this

Post by Leon
Hi,
Is there a way I can open AD Users and Computers and connect to a domain if
the computer I am using is not part of that domain?
Maybe opening it from the command line and include the proper credentials in
the syntax...since I cant right click and connect to the domain or domain
controller because I get an access denied error.....
I have tried using `runas` but still get an error 1326...
I have tried: runas /user:<domain>\xxxxxx "dsa.msc /domain=<domain>" but it
doesnt work...
dsa.msc /domain=<domain> /user=xxxxxx doesnt work either...
any ideas?

Leon

2008-01-08 20:53:02 UTC

Permalink

But then why is there an option in the GUI to right click and connect to
another domain?

Post by Joe D
no, you cannot do this

Smith Power

2008-01-08 22:13:58 UTC

Permalink

.
That option; connects to another domain is there for domains whom are in the
same forest as you, such as child domains.

If you have a domain ifpigsoculdfly.com and it has sub domains
usa.ifpigscouldfly.com, jp.ifpigscouldfly.com and uk.ifpigscouldfly.com.
When you are managing the sub domains from ifpigscouldfly.com you will need
to connect to each respective domain to see its objects in order to manage
them.

Post by Leon
But then why is there an option in the GUI to right click and connect to
another domain?

Post by Joe D
no, you cannot do this

Post by Leon
Hi,
Is there a way I can open AD Users and Computers and connect to a
domain
if
the computer I am using is not part of that domain?
Maybe opening it from the command line and include the proper
credentials
in
the syntax...since I cant right click and connect to the domain or domain
controller because I get an access denied error.....
I have tried using `runas` but still get an error 1326...
I have tried: runas /user:<domain>\xxxxxx "dsa.msc /domain=<domain>"
but
it
doesnt work...
dsa.msc /domain=<domain> /user=xxxxxx doesnt work either...
any ideas?

Wayne Tilton

2008-01-08 22:23:19 UTC

Permalink

Post by Leon
Hi,
Is there a way I can open AD Users and Computers and connect to a
domain if the computer I am using is not part of that domain?
Maybe opening it from the command line and include the proper
credentials in the syntax...since I cant right click and connect to
the domain or domain controller because I get an access denied
error.....
I have tried using `runas` but still get an error 1326...
I have tried: runas /user:<domain>\xxxxxx "dsa.msc /domain=<domain>"
but it doesnt work...
dsa.msc /domain=<domain> /user=xxxxxx doesnt work either...
any ideas?

Try this (one line, will wrap):

runas /netonly /user:domain\userid "mmc dsa.msc
/server=dc.in.other.domain"

That should launch the dsa.msc pointing to 'dc.in.other.domain' using the
supplied credentials.

HTH,

Wayne Tilton

Leon

2008-01-11 03:12:38 UTC

Permalink

I get RUNAS ERROR Unable to run - mmc dsa.msc /domain=<domain>
740: The requested operation requires elevation

Post by Wayne Tilton
runas /netonly /user:domain\userid "mmc dsa.msc
/server=dc.in.other.domain"
That should launch the dsa.msc pointing to 'dc.in.other.domain' using the
supplied credentials.
HTH,
Wayne Tilton

Leon

2008-01-11 03:34:48 UTC

Permalink

This worked.....

THANKS YOU VERY MUCH!!!!!!

Post by Wayne Tilton

Post by Leon
Hi,
Is there a way I can open AD Users and Computers and connect to a
domain if the computer I am using is not part of that domain?
Maybe opening it from the command line and include the proper
credentials in the syntax...since I cant right click and connect to
the domain or domain controller because I get an access denied
error.....
I have tried using `runas` but still get an error 1326...
I have tried: runas /user:<domain>\xxxxxx "dsa.msc /domain=<domain>"
but it doesnt work...
dsa.msc /domain=<domain> /user=xxxxxx doesnt work either...
any ideas?

runas /netonly /user:domain\userid "mmc dsa.msc
/server=dc.in.other.domain"
That should launch the dsa.msc pointing to 'dc.in.other.domain' using the
supplied credentials.
HTH,
Wayne Tilton

Marcin

2008-01-09 02:34:38 UTC

Permalink

Create on the local computer an account with credentials matching an account
with desired privileges in the target domain (username and password need to
match). Switch to its security context either by using RUNAS or interactive
logon. Launch DSA.MSC and point it to the target domain controller (or
domain - assuming its zones are accessible via the DNS server your computer
is configured for).

hth
Marcin

Jorge Silva

2008-01-09 06:36:43 UTC

Permalink

Hi
I didn't test but try the:
runas /user:<domain>\xxxxxx "MMC dsa.msc /domain=<domain>"

let me know the results
--
I hope that the information above helps you.
Have a Nice day.

Jorge Silva
MCSE, MVP Directory Services