AD Users and Computers

[Leon]

Hi,
Is there a way I can open AD Users and Computers and connect to a domain if
the computer I am using is not part of that domain?

Maybe opening it from the command line and include the proper credentials in
the syntax...since I cant right click and connect to the domain or domain
controller because I get an access denied error.....

I have tried using `runas` but still get an error 1326...

I have tried: runas /user:<domain>\xxxxxx "dsa.msc /domain=<domain>" but it
doesnt work...

dsa.msc /domain=<domain> /user=xxxxxx doesnt work either...

any ideas?

[Joe D]

no, you cannot do this



"Leon" <Leon@discussions.microsoft.com> wrote in message
news:7CD27F76-597D-4648-A720-416F508FAC86@microsoft.com...
> Hi,
> Is there a way I can open AD Users and Computers and connect to a domain
> if
> the computer I am using is not part of that domain?
>
> Maybe opening it from the command line and include the proper credentials
> in
> the syntax...since I cant right click and connect to the domain or domain
> controller because I get an access denied error.....
>
> I have tried using `runas` but still get an error 1326...
>
> I have tried: runas /user:<domain>\xxxxxx "dsa.msc /domain=<domain>" but
> it
> doesnt work...
>
> dsa.msc /domain=<domain> /user=xxxxxx doesnt work either...
>
> any ideas?
>

[Leon]

But then why is there an option in the GUI to right click and connect to
another domain?

"Joe D" wrote:

> no, you cannot do this
>
>
>
> "Leon" <Leon@discussions.microsoft.com> wrote in message
> news:7CD27F76-597D-4648-A720-416F508FAC86@microsoft.com...
> > Hi,
> > Is there a way I can open AD Users and Computers and connect to a domain
> > if
> > the computer I am using is not part of that domain?
> >
> > Maybe opening it from the command line and include the proper credentials
> > in
> > the syntax...since I cant right click and connect to the domain or domain
> > controller because I get an access denied error.....
> >
> > I have tried using `runas` but still get an error 1326...
> >
> > I have tried: runas /user:<domain>\xxxxxx "dsa.msc /domain=<domain>" but
> > it
> > doesnt work...
> >
> > dsa.msc /domain=<domain> /user=xxxxxx doesnt work either...
> >
> > any ideas?
> >
>
>

[Smith Power]

..
That option; connects to another domain is there for domains whom are in the
same forest as you, such as child domains.



If you have a domain ifpigsoculdfly.com and it has sub domains
usa.ifpigscouldfly.com, jp.ifpigscouldfly.com and uk.ifpigscouldfly.com.
When you are managing the sub domains from ifpigscouldfly.com you will need
to connect to each respective domain to see its objects in order to manage
them.



"Leon" <Leon@discussions.microsoft.com> wrote in message
news:6A840700-9CDC-4CB0-8FFA-38E86B2B4925@microsoft.com...
> But then why is there an option in the GUI to right click and connect to
> another domain?
>
> "Joe D" wrote:
>
>> no, you cannot do this
>>
>>
>>
>> "Leon" <Leon@discussions.microsoft.com> wrote in message
>> news:7CD27F76-597D-4648-A720-416F508FAC86@microsoft.com...
>> > Hi,
>> > Is there a way I can open AD Users and Computers and connect to a
>> > domain
>> > if
>> > the computer I am using is not part of that domain?
>> >
>> > Maybe opening it from the command line and include the proper
>> > credentials
>> > in
>> > the syntax...since I cant right click and connect to the domain or
>> > domain
>> > controller because I get an access denied error.....
>> >
>> > I have tried using `runas` but still get an error 1326...
>> >
>> > I have tried: runas /user:<domain>\xxxxxx "dsa.msc /domain=<domain>"
>> > but
>> > it
>> > doesnt work...
>> >
>> > dsa.msc /domain=<domain> /user=xxxxxx doesnt work either...
>> >
>> > any ideas?
>> >
>>
>>

[Wayne Tilton]

=?Utf-8?B?TGVvbg==?= <Leon@discussions.microsoft.com> wrote in
news:7CD27F76-597D-4648-A720-416F508FAC86@microsoft.com:

> Hi,
> Is there a way I can open AD Users and Computers and connect to a
> domain if the computer I am using is not part of that domain?
>
> Maybe opening it from the command line and include the proper
> credentials in the syntax...since I cant right click and connect to
> the domain or domain controller because I get an access denied
> error.....
>
> I have tried using `runas` but still get an error 1326...
>
> I have tried: runas /user:<domain>\xxxxxx "dsa.msc /domain=<domain>"
> but it doesnt work...
>
> dsa.msc /domain=<domain> /user=xxxxxx doesnt work either...
>
> any ideas?
>

Try this (one line, will wrap):

runas /netonly /user:domain\userid "mmc dsa.msc
/server=dc.in.other.domain"

That should launch the dsa.msc pointing to 'dc.in.other.domain' using the
supplied credentials.

HTH,

Wayne Tilton

[Marcin]

Create on the local computer an account with credentials matching an account
with desired privileges in the target domain (username and password need to
match). Switch to its security context either by using RUNAS or interactive
logon. Launch DSA.MSC and point it to the target domain controller (or
domain - assuming its zones are accessible via the DNS server your computer
is configured for).

hth
Marcin

[Jorge Silva]

Hi
I didn't test but try the:
runas /user:<domain>\xxxxxx "MMC dsa.msc /domain=<domain>"

let me know the results

--
I hope that the information above helps you.
Have a Nice day.

Jorge Silva
MCSE, MVP Directory Services

"Leon" <Leon@discussions.microsoft.com> wrote in message
news:7CD27F76-597D-4648-A720-416F508FAC86@microsoft.com...
> Hi,
> Is there a way I can open AD Users and Computers and connect to a domain
> if
> the computer I am using is not part of that domain?
>
> Maybe opening it from the command line and include the proper credentials
> in
> the syntax...since I cant right click and connect to the domain or domain
> controller because I get an access denied error.....
>
> I have tried using `runas` but still get an error 1326...
>
> I have tried: runas /user:<domain>\xxxxxx "dsa.msc /domain=<domain>" but
> it
> doesnt work...
>
> dsa.msc /domain=<domain> /user=xxxxxx doesnt work either...
>
> any ideas?
>

[Leon]

I get RUNAS ERROR Unable to run - mmc dsa.msc /domain=<domain>
740: The requested operation requires elevation

"Wayne Tilton" wrote:

> =?Utf-8?B?TGVvbg==?= <Leon@discussions.microsoft.com> wrote in
> news:7CD27F76-597D-4648-A720-416F508FAC86@microsoft.com:
> >
>
> Try this (one line, will wrap):
>
> runas /netonly /user:domain\userid "mmc dsa.msc
> /server=dc.in.other.domain"
>
> That should launch the dsa.msc pointing to 'dc.in.other.domain' using the
> supplied credentials.
>
> HTH,
>
> Wayne Tilton
>

[Leon]

This worked.....

THANKS YOU VERY MUCH!!!!!!

"Wayne Tilton" wrote:

> =?Utf-8?B?TGVvbg==?= <Leon@discussions.microsoft.com> wrote in
> news:7CD27F76-597D-4648-A720-416F508FAC86@microsoft.com:
>
> > Hi,
> > Is there a way I can open AD Users and Computers and connect to a
> > domain if the computer I am using is not part of that domain?
> >
> > Maybe opening it from the command line and include the proper
> > credentials in the syntax...since I cant right click and connect to
> > the domain or domain controller because I get an access denied
> > error.....
> >
> > I have tried using `runas` but still get an error 1326...
> >
> > I have tried: runas /user:<domain>\xxxxxx "dsa.msc /domain=<domain>"
> > but it doesnt work...
> >
> > dsa.msc /domain=<domain> /user=xxxxxx doesnt work either...
> >
> > any ideas?
> >
>
> Try this (one line, will wrap):
>
> runas /netonly /user:domain\userid "mmc dsa.msc
> /server=dc.in.other.domain"
>
> That should launch the dsa.msc pointing to 'dc.in.other.domain' using the
> supplied credentials.
>
> HTH,
>
> Wayne Tilton
>