Working with Active Directory on a computer outside a domain

A lot of people don’t realize this, but if you have a computer outside (not joined to a domain) you can still access on-prem Active Directory. No reason to domain join your computer just to do some AD work. 😉

As long as you are connected to the local network, say for example with VPN or cable, you can actually run the AD console as a domain user with the runas command:

runas.exe /netonly /user:abc.local\jsmith "mmc dsa.msc /domain=abc.local"

Similarly, you can do this with other programs in Windows. Here are some examples:

runas.exe /netonly /user:abc.local\jsmith "CMD.exe /domain=abc.local"

...enter your domain password

and from here you could run for example...

Get-ADUser -server EXDC01 jsmith -Properties *

Note that you need admin rights to run the command.

Leave a Reply

Your email address will not be published. Required fields are marked *