Run as different domain user.

Hi,
Need to test a new Windows login in SSMS.
I setup a shortcut as below but I seem access SSMS using the domain account I specified in the shortcut, even though I have been prompted for the password.
C:\Windows\System32\runas.exe /netonly /user:rkh\sqlmonitor "C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\ManagementStudio\Ssms.exe"
Any ideas?

Are you trying to connect the SQL server from machine(SSMS) in different domain ?
Try below link , it really works for me, i using this to connect to SQL server in different Domain
1) Create generic Credential in Credential Manager(control panel) with sql server(with port) and username/password
2)Run as with the username which is specified in the generic Credential(may be you can create short cut if you frequently access the SQL Server)
C:\Windows\System32\runas.exe /netonly /user:[domain]\[username] “C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\VSShell\Common7\IDE\Ssms.exe”
Note: in SSMS it will display the local userid(domain id) in object explorer, you can verify tin by running(suser_name())
Refer
http://www.mssqltips.com/sqlservertip/3250/connect-to-sql-servers-in-another-domain-using-windows-authentication/
Thanks
Saravana Kumar C

Similar Messages

Can I run 2 different domains with same name but on 2 different machines?

I am trying to setup 2 domains with same name (sharedcds1) on 2 different machines (Machine1 and Machine2).
          When I start the weblogic managed server 1 (sharedcds1managedserver1) on Machine2, it throws an error saying it has some conflicts with the managed server 1 running on Machine1. How did the managed server of one machine know about the other server. Can I run 2 different domains with same name but on 2 different machines?
          Here is the error in the log -
          <Jun 14, 2005 10:53:29 AM EDT> <Error> <Cluster> <BEA-000123> <Conflict start: You tried to bind an
          object under the name weblogic.transaction.coordinators.sharedcds1managedserver1 in the JNDI tree.
          The object from 4596206652609838848S:130.170.61.153:[9505,9505,-1,-1,9505,-1,-1,0,0]:sharedcds1:s
          haredcds1managedserver1 is non-clusterable, and you have tried to bind more than once from two or m
          ore servers. Such objects can only be deployed from one server.>
          <Jun 14, 2005 10:53:29 AM EDT> <Error> <Cluster> <BEA-000123> <Conflict start: You tried to bind an
          object under the name weblogic.transaction.coordinators.sharedcds1managedserver1 in the JNDI tree.
          The object from 8842351474821025197S:130.170.61.154:[9505,9505,-1,-1,9505,-1,-1,0,0]:sharedcds1:s
          haredcds1managedserver1 is non-clusterable, and you have tried to bind more than once from two or m
          ore servers. Such objects can only be deployed from one server.>
          Thanks
          Satish

Yes you can. Make sure that domains configured to use different multicast address. WLS uses multicast for communications between nodes in domain.
          although your configuration will work, you could have troubles if you going to execute inter-domain calls between domains/servers with the same names.

Office 2013 applications will not run as a domain users

I have a windows 7 64-bit pc with 2013 office home and and business installed. When trying to access Office as a domain user the programs will not run. Is there a fix for this other than making the users local admins?

Hi,
Which version of Office 2013 did you deployed, Windows Installer-based version or the Click-to-Run version?
Did you install the Office product with local administrator account? I notice that the users must be local administrators on their computers to install Office:
http://technet.microsoft.com/en-us/library/ee624360.aspx
If we add the local admin right to the user, can the Office programs be launched? If so, repair the Office programs and then remove the local admin right. See if it can work.
Best regards,
Rex Zhang
TechNet Community Support

Domain users creation for BizTalk server 2013 installation

Hi all,
I am setting up biztalk 2013 environment clustered BizTalk server and single sql server. I would like to know the list of domain users and domain groups to be created and which groups these users to be a member of. I am also installing and would be using
Sharepoint to develop BizTalk interfaces.
Thanks
Please Help
Vikram

Hi Vikram ,
You need to create below Windows group on your AD before you start your BizTalk Configuration .
1)SSO Administrators:Administrator of the Enterprise Single Sign-On (SSO) service.
2)SSO Affiliate Administrators :Administrators of certain SSO affiliate applications.Can create/delete SSO affiliate applications, administer user mappings, and set credentials for affiliate application users.
3)BizTalk Server Administrators:Has the least privileges necessary to perform administrative tasks Can deploy solutions, manage applications, and resolve message processing issues.
To perform administrative tasks for adapters, receive and send handlers, and receive locations, the BizTalk Server Administrators must be added to the Single Sign-On Affiliate Administrators.
4)BizTalk Server Operators:Has a low privilege role with access only to monitoring and troubleshooting actions
5) BizTalk Application Users:The default name of the first In-Process BizTalk Host Group created by Configuration Manager.Use one BizTalk Host Group for each In-Process host in your environment.Includes accounts with access to In-Process
BizTalk Hosts (hosts processes in BizTalk Server, BTSNTSvc.exe).
6)BizTalk Isolated Host Users :The default name of the first Isolated BizTalk Host Group created by Configuration Manager. Isolated BizTalk hosts not running on BizTalk Server, such as HTTP and SOAP.Use one BizTalk Isolated Host Group for
each Isolated Host in your environment.
7)BAM Portal Users :Has access to BAM Portal Web site.
8)BizTalk SharePoint Adapter Enabled Hosts :Has access to Windows SharePoint Services Adapter Web Service
9)BizTalk B2B Operators Group : A new BizTalk role that reduces the onus on the Administrators to perform all Party management operation. This role allows windows users associated with the role to perform all party management operations.
Now coming to domain User , you can have single -multiple setting were you can run SSO ,InProcess and Isolated on different domain user . You can also run all the configuration settings on single user as well .
Thanks
Abhishek

Windows Authentication - Different Domain

Hi:
I am trying to figure out if there is a way to connect via SQL Server Management Studio to a server sitting on a separate domain. So here is the situation. there is Server B which sits in a domain called DomainB. If I am in DomainA, I could typically remote into that server utilizing an IP address in DomainB, and even transfer files to that server. But how do I connect via SQL Server Management Studio(basically login as a different domain user) to Server B in DomainB from DomainA. Basically when I choose Windows Authentication from the dropdown list in SQL Server Management Studio, it grays out the username field, which is where I could type something like this domainB\usernameondomainB, similar to how you would connect to a share on that server. Please let me know if there is a possibly solution to this. Also, our customer doesnot allow SQL Server Auth/Logins, so that is not an option. Thanks.

Raul Garcia - MS wrote:
The reason why the user name/password fields are unavailable in SQL Server Management Studio is because it will use the current Windows token (i.e. the interactive user credentials) to establish the connection.
If you want to use different credentials you will need to impersonate the different principal in Windows (i.e. RunAs) before running Management Studio.
I also recommend posting tool related questions in the tools forum (http://forums.microsoft.com/MSDN/ShowForum.aspx?ForumID=84&SiteID=1).
I hope this information will help.
-Raul Garcia
SDE/T
SQL Server Engine
Raul.
I have exactly the same problem, but the solution that you are giving doesm't solve the problem.
I can't RUN Managment Studio with RUN AS a member of a domainB if I'm in a machine that is member of the domainA.
Is there any way I can modify Managment Studio to ENABLE the login and pass to introduce the domain using the WIN AUTHENTICATION ?

"File History" won't open/start for domain user profile/account

I'm trying to use the File History feature in Windows 8.1 to create backups. When I click "File History" from the control panel, nothing happens. No new window opens, it just stays at the Control Page.
I've tried manually going to "Control Panel\All Control Panel Items\File History".
All works fine with local Administrative user profile.
Why does File History not start/open/run for the domain user account that is in the Administrators Group?

Hi,
Base on my lab machine (Windows Server 2008 R2 DC, Windows 8.1 client). either domain admin user or domain standard user, they all work fine.
What's your environment? Did this issue occur on all domain user or specific one?
In some cases, File History may conflict with the enterprise policies (like retention policy). I suggest you contact your IT admin to see if there is some other policy to limit this.
Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected]

Acrobat x pro crashes (error 6) under domain user account

Acrobat X Pro (installed under CS6 Suite) crashes when run under a domain users account (receives error 6, uninstall/reinstall product). I've done this many times with the same result. My feeling is that the problem is related to permissions/rights issues as the product works fine when logged into the local administrator account. Any thoughts/comments would be appreciated.

Acrobat X Pro (installed under CS6 Suite) crashes when run under a domain users account (receives error 6, uninstall/reinstall product). I've done this many times with the same result. My feeling is that the problem is related to permissions/rights issues as the product works fine when logged into the local administrator account. Any thoughts/comments would be appreciated.

Can we map three BPC users with single domain user

Hi..
When we map the three BPC users in the ABAP server in the program UJA3_WRITE_SYS_USERS with domain user,can we map with only one domain user for all three BPC users or we have to use three different domain users to map the three BPC users?
Please do reply
Thanks
Bobby

yep
u can map three bpc user with single domain user.
but domain user must have management roles.

SDK service using domain user trying to set SPN for computer account

I have a SDK service running under a domain user account, but it tries to register the SPN for the computer account of the machine?!
Therefore I get the following alert:
The System Center Data Access service failed to register an SPN. A domain admin needs to add MSOMSdkSvc/WIN-9IAJC0HS9RJ and MSOMSdkSvc/WIN-9IAJC0HS9RJ.domainxx.local to the servicePrincipalName of CN=WIN-9IAJC0HS9RJ,CN=Computers,DC=domainxx,DC=local
Which makes sense because it has not the permissions to do that.
When I make the domain user account member of domain admins it has the concerning permissions and it indeed registers that SPN to the computer account. But why?? The SPN should be registered to the domain user account instead (and therefore I had given the
domain user account the read/write permissions to itself to do that).
I have the following SPN registered now for the computer and domain user account:
setspn -l WIN-9IAJC0HS9RJ
Registered ServicePrincipalNames for CN=WIN-9IAJC0HS9RJ,CN=Computers,DC=domainxx
DC=local:
MSOMSdkSvc/WIN-9IAJC0HS9RJ
MSOMSdkSvc/WIN-9IAJC0HS9RJ.domainxx.local
MSOMHSvc/WIN-9IAJC0HS9RJ
MSOMHSvc/WIN-9IAJC0HS9RJ.domainxx.local
TERMSRV/WIN-9IAJC0HS9RJ
TERMSRV/WIN-9IAJC0HS9RJ.domainxx.local
WSMAN/WIN-9IAJC0HS9RJ
WSMAN/WIN-9IAJC0HS9RJ.domainxx.local
RestrictedKrbHost/WIN-9IAJC0HS9RJ
HOST/WIN-9IAJC0HS9RJ
RestrictedKrbHost/WIN-9IAJC0HS9RJ.domainxx.local
HOST/WIN-9IAJC0HS9RJ.domainxx.local
setspn -l domainxx\omdas
Registered ServicePrincipalNames for CN=OMDAS,CN=Users,DC=domainxx,DC=local:
none for this account
I don't get it. Anyone?
I am using SCOM 2012 R2
Pls help.
Thanx in advance.
Regards
Chris

SCOM SDK service really tries to set its SPN to the computer account (although the SDK service is running using a domain user account). The alert is no bug!
I know this for sure because I gave the SDK service permission to do it - by making the domain user account member of the domain admins security group - and it indeed sets the SPN on the computer account.
The latter is the actual bug I would say! It should try to set the SPN for the domain user account the sdk service is running with.
Then again, nog having the SPN been set correctly to this domain user account, does not seem to bother SCOM at all indeed. Perhaps it uses NTLM instead in this scenario.
Can anyone comfirm?

Fonts displaying different per user login

Hello
I have an issue where on the same PC if one user logs in the Form that they load has Fonts displaying different
If another users logs in the fonts display normal , same PC . What can be different on the log in that would produce this , Reader is version 10.1.13 . Again this is happening on the same PC , different DOMAIN users , same Form any advise ?
Bad Form
good form

You are right: all fonts on a system should be available to all users.
Can you share that PDF: https://forums.adobe.com/thread/1408375 ?

Run commands on remote Hyper-V host in different domain/network with powershell

Hi experts,
My Setup: Windows Server 2012 R2 / SCVMM 2012 managing localhost and other Hyper-V hosts
I need to run a script on the remote Hyper-V Host which is in different domain/workgroup using powershell.
I have tried
Invoke-SCScriptcommand cmdlet. But I am getting the below error
Error (2917)
Virtual Machine Manager cannot process the request because an error occurred while authenticating MY-PC-15.mydomain.local. Possible causes are:
1) The specified user name or password are not valid.
2) The Service Principal Name (SPN) for the remote computer name and port does not exist.
3) The client and remote computers are in different domains and there is not a two-way full trust between the two domains.
The network path was not found (0x80070035)
I tried the 'Run Script Command' option in the Host tab in VMM. But getting the same error.
Checked that it uses the 'Invoke-ScScriptcommand' PS cmdlet.
Could someone explain how to run scripts on remote Hyper-V host in different Domain/Perimeter network ?
Regards,
Saleem

Hi Saleem,
Please try to follow the article below to regarding using command "enter-pssession" across domains :
https://social.technet.microsoft.com/Forums/windowsserver/en-US/f60a29ef-925e-4712-9788-1f95e12c8cfc/forum-faq-introduce-windows-powershell-remoting?forum=winserverpowershell
(I tested it in my lab )
Best Regards,
Elton Ji
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected] .

Mapping users coming from different domain in AD

HI,
We have configured vintela SSO which is working.Now we are trying to add another domain but it has been unsuccessful.
We have imported the users coming from other domain in CMC->AD, and UseFDQNDirectoryForServers parameter in registry.
The issue is our complex krb5.ini errors as "cannot find kdc for realm" for the user account coming from the other domain.The existing domain kinit is successful.
Please help in resolving this issue!!! We need to have users coming from different domain to use vintela SSO.
Thank you.

well you're mixing things up a bit.
The usefqdnfordirectoryservers is used to map in groups. If the groups show up as well as the users that piece should be complete.
the krb5.ini is for logging in users manually, it must conatin the KDC for every domain that may contain users that need to log into BO. It also must have a KDC or capath entry to define all the parent domains as well (even if they do not have members that need to login. This is how the krb5 is used to verify transitive trusts. Then all users that are not in the default domain must logon as username@ DNSDOMAIN.COM where the DNS domain is entered in all caps aqnd represents the FQDN of theidomain the users bewlong to. Now if not logging in manually this should be a big problem.
So for SSO (vintela anyway) this process is automatic, although you may want to configure vintela with site information so it doesn't randomly use all your DC's Site can be set following the steps at the end of business objects note 1261835 (complete and vintela only editions).
In order for vintela to work properly the value entered in CMC > Authentication > Windows AD > service principal name must = an SPN thet was created on the account that is running the SIA/CMS
Regards,
Tim

Can I run a different user as the managed server than the admin server?

Under unix, can I run a Weblogic 7 managed instance as a different user than the
admin server in the same domain? If not, any reference docs on BEAs site?

You mean a different UNIX user? Yes, that should be fine.
-- Rob
Frank wrote:
Under unix, can I run a Weblogic 7 managed instance as a different user than the
admin server in the same domain? If not, any reference docs on BEAs site?

Windows 8.1 Run as different user from search function

Hi There,
After about a year of Windows 8 I was actually quite enjoying the ability to type a program name in start menu and then use right click to run as a different user. which is achieved via changing local security policy (i.e. running rsat tools
as a domain admin account etc). However, Now that Microsoft have decided that a search bar should appear when you start typing from the start menu, although this now displays the applications in the sidebar you can no longer right click and run as different
user. This means that for me windows 8.1 is now less user friendly than its older brother. Has this function been implemented and am I just missing something?
Thanks,
Chris

Hi Chris,
Based on my research, on the windows 8.1,we could add "Run as different user" on Start in Group Policy.
Please perform the following steps:
1.Press Win+R, and type"gpedit.msc",then press Enter.
2.In the left pane, click/tap on to expand User Configuration, Administrative Templates, and open Start Menu and Taskbar.
3.In the right pane of Start Menu and Taskbar, double click/tap on Show "Run as different user" command on Start.
4.Select Enabled, click/tap on OK.
5.Reboot the computer.
Hope these could be helpful.
Regards,
Kelvin_Hsu
TechNet Community Support

Run As Different User

Can we please have this back in the Start menu? It works from the taskbar. I had to registry hack Windows 8 to get that functionality and that was a total pain. As an admin I use the Run As context for everything under the Administrative Tools folder.
It would be nice to either right-click or at least Shift+right-click to get this functionality.
Thanks.

Yeah, I'm shift+right-clicking, no "Run As Different User". I do have "Run As Administrator", which is useless for network/domain admin stuff. I like my desktop and taskbar to be as clean as possible. The cool thing about Win 8 was
the organizable start screen which worked well for me. Since there's no more Start Screen I need a way to keep the programs organized and I want to keep them in the Start menu.
If I pin it to the taskbar I will gain this functionality, but that's entirely too many icons to be pinned.

Run as different domain user.

Similar Messages

Maybe you are looking for