Running admin commands on a workstation
As best practice recommends, I have two user accounts for my administrator workstation: the local Administrator account for when I want to perform admin tasks, and an ordinary user account (member of Domain Users) for activities like checking email, writing reports, browsing the web and so on.When I'm logged on as ordinary user and want to perform some quick admin task, I usually open a command prompt with domain admin credentials and then run the admin tool I need by typing it into the command window. Here's how I do it:
Create a new shortcut and type the following as the command path:
runas /u:DOMAIN\administrator cmd.exe
where DOMAIN is the name of your domain. Name the shortcut something like "run cmd as domadmin" and drag it onto your Quick Launch toolbar so it's easy to access.
Now click the shortcut when you want to run some admin tool like Event Viewer to view the event logs on your remote domain controller. This opens a command window prompting you for the password for the domain Administrator account. Type the password and press ENTER and the first command window will disappear and a new one will open. This new command window is running under domain admin credentials, so now to view the event logs on your remote domain controller type:
where DCNAME is the name of your remote domain controller.