HOWTO: Cache profile/domain credentials using Runas.exe
admin | October 1, 2008Requirement: Target system:
- Must be a domain member.
- Must be able to reach a domain-controller (via LAN, VPN, dial-up, …).
- You must have access to an existing local or [cached] domain account.
HOWTO:
- Logon using any local or domain account. If necessary, connect to VPN before or after logging-in.
- Verify access to domain (i.e., Can you ping a domain controller?)
- Run the following command from a Command Prompt: runas /user:<domain\user> <executable>
E.g.: runas /user:corp\johanns notepad.exe - Enter user’s password when prompted.
- If connection/authentication succeeds, the system will create and/or cache profile/credentials for the target account, and start the application specified by the runas command. At this point, you may exit the app, and logout of the proxy account.
- Logon using the newly cached credentials.
