Running Applications Using Campus AD Credentials from a Non-Domain Joined Windows PC

This document summarizes how to run various tools from a command line.

Using the runas command available in an Administrative-level command line (cmd) on a Windows device it is possible to use campus AD credentials to authenticate even on a non-domain joined Windows computer.

Requirements
  • Commands must be run from an Administrator-level command line window on a computer running Microsoft Windows.
  • You must be able to connect to the campus AD domain controllers.
Below are some examples of use but this could be used to execute any application (such as PowerShell or another cmd session).



Example of Use: Active Directory Users and Computers: runas /netonly /user:AD.WISC.EDU\netid-ou “mmc dsa.msc /server=CADSDC-PROD-01.AD.WISC.EDU”
This command allows you to run the Active Directory Users and Computers Microsoft Console application as if you were joined to the campus Active Directory authenticating as your -ou user in the campus Active Directory.
Note: This command requires Remote Server Administration Tools to be installed. 

Example of Use: Group Policy Editor: runas /netonly /user:AD.WISC.EDU\netid-ou “mmc gpedit.msc /server=CADSDC-PROD-01.AD.WISC.EDU”
This command allows you to run the Group Policy Editor Microsoft Console application as if you were joined to the campus Active Directory authenticating as your -ou user in the campus Active Directory.
Note: This command requires Remote Server Administration Tools to be installed. 

For more information on the applications within RSAT visit Microsoft's site here. 




Keywords:administrator tools join joined domain   Doc ID:96405
Owner:Marc T.Group:Identity and Access Management
Created:2019-12-04 15:57 CDTUpdated:2020-04-09 08:57 CDT
Sites:Campus Active Directory, Identity and Access Management
Feedback:  0   0