Running dsa.msc from a computer not joined into domain

Discussion in 'Active Directory' started by Matt, Oct 13, 2004.

  1. Matt

    Matt Guest

    I'm trying to figure out if this is possible:

    I have a laptop that I take to numerous clients, and I
    really don't like to join it to the domain because it's a
    pain to do that constantly and deal with user accounts,
    etc.

    But, I would still like to use dsa.msc (AD Users and
    Computers) and related tools to manage domains from my
    laptop. Is there a way to do this?

    I have tried all combinations of runas.
    Additionally, "Connect To Another Computer/Domain:" (i.e.
    from compmgmt.msc or something) only works on non-DC's
    near as I can tell, so in this configuration it's useless
    for dsa.msc. It just says, "Access is Denied" without
    possibility of prompting for credentials.

    I think it all boils down to the domain not trusting my
    computer and vice versa. This is why I think this may
    not be possible. But, I'm hoping some of you can think
    of a way around this problem.

    Thanks in advance,

    Matt
     
    Matt, Oct 13, 2004
    #1
    1. Advertising

  2. You need to be joined to a domain. If the laptop has enough horsepower, load
    Virtual PC and create a XP imeage which you just join to client domains.

    --
    --
    Brian Desmond
    Windows Server MVP
    12.il.us

    Http://www.briandesmond.com


    "Matt" <> wrote in message
    news:343a01c4b0b0$46be8440$...
    > I'm trying to figure out if this is possible:
    >
    > I have a laptop that I take to numerous clients, and I
    > really don't like to join it to the domain because it's a
    > pain to do that constantly and deal with user accounts,
    > etc.
    >
    > But, I would still like to use dsa.msc (AD Users and
    > Computers) and related tools to manage domains from my
    > laptop. Is there a way to do this?
    >
    > I have tried all combinations of runas.
    > Additionally, "Connect To Another Computer/Domain:" (i.e.
    > from compmgmt.msc or something) only works on non-DC's
    > near as I can tell, so in this configuration it's useless
    > for dsa.msc. It just says, "Access is Denied" without
    > possibility of prompting for credentials.
    >
    > I think it all boils down to the domain not trusting my
    > computer and vice versa. This is why I think this may
    > not be possible. But, I'm hoping some of you can think
    > of a way around this problem.
    >
    > Thanks in advance,
    >
    > Matt
     
    Brian Desmond [MVP], Oct 13, 2004
    #2
    1. Advertising

  3. Matt

    Wayne Tilton Guest

    "Brian Desmond [MVP]" <12.il.us> wrote in
    news::

    > You need to be joined to a domain. If the laptop has enough
    > horsepower, load Virtual PC and create a XP imeage which you just join
    > to client domains.
    >


    No you don't. Assuming you've installed the adminpak.msi on the XP
    machine, you can:

    runas /netonly /user:somedomain\someuserid "mmc dsa.msc"

    Wayne

    --
    Standard Disclaimer: I said it, they didn't, so blame me, not them!
    Spam Avoidance: My reply address is invalid to confuse the spambots.
    You can reach me at 'Wayne_Tilton at yahoo dot com'
     
    Wayne Tilton, Oct 13, 2004
    #3
  4. Cool. Thanks for the tip, Wayne!

    --
    --
    Brian Desmond
    Windows Server MVP
    12.il.us

    Http://www.briandesmond.com


    "Wayne Tilton" <> wrote in message
    news:Xns9581843A32D6ENWDCLMIT@207.46.248.16...
    > "Brian Desmond [MVP]" <12.il.us> wrote in
    > news::
    >
    > > You need to be joined to a domain. If the laptop has enough
    > > horsepower, load Virtual PC and create a XP imeage which you just join
    > > to client domains.
    > >

    >
    > No you don't. Assuming you've installed the adminpak.msi on the XP
    > machine, you can:
    >
    > runas /netonly /user:somedomain\someuserid "mmc dsa.msc"
    >
    > Wayne
    >
    > --
    > Standard Disclaimer: I said it, they didn't, so blame me, not them!
    > Spam Avoidance: My reply address is invalid to confuse the spambots.
    > You can reach me at 'Wayne_Tilton at yahoo dot com'
     
    Brian Desmond [MVP], Oct 19, 2004
    #4
    1. Advertising

Want to reply to this thread or ask your own question?

It takes just 2 minutes to sign up (and it's free!). Just click the sign up button to choose a username and then you can ask your own questions on the forum.
Similar Threads
  1. Hareth
    Replies:
    1
    Views:
    170
    Ace Fekay [MVP]
    Jul 6, 2004
  2. Jerold Schulman
    Replies:
    0
    Views:
    298
    Jerold Schulman
    Feb 17, 2006
  3. Mark Greifenberg

    dsa.msc from the command line

    Mark Greifenberg, Mar 15, 2006, in forum: Windows Server
    Replies:
    3
    Views:
    1,171
    Jerold Schulman
    Mar 16, 2006
  4. Candace Sparks

    dsa.msc problem

    Candace Sparks, Mar 17, 2007, in forum: Windows Server
    Replies:
    0
    Views:
    221
    Candace Sparks
    Mar 17, 2007
  5. Spin
    Replies:
    2
    Views:
    570
    DemoDog
    Nov 22, 2005
Loading...

Share This Page