Microsoft Management Console (MMC)

The Microsoft Management Console (MMC) provides a GUI. when used with the Remote Server Administration Tool's (RSAT) AD snap-ins, it can be used to enumerate and modify AD objects (with proper permissions).

However, this requires a remote desktop (RDP) access to the target machine. Running MMC normally may not work if the target computer is not domain-joined, as the local account cannot be used to authenticate to the domain. As a workaround, the runas.exe binary can be used:

runas.exe /netonly /user:<domain>\<username> mmc.exe

Now, all the network connections initiated by MMC will use the injected AD credentials.

Last updated