Windows – How to manage computers from another AD domain with Windows MMC

active-directorywindows

I am currently managing computers distributed across 2 different AD domains. I shall call the 2 domains MEDIA and DATA. My workstation is a member of the MEDIA (192.168.10/24) domain, along with most of my coworkers.

The DATA 10.0.62.0/24) domain is in a remote data center. I have a valid administrator account in both directories.

There is a VPN in place that gives me free access to the remote domain.

I am using Windows management console (MMC) to manage computers in my local domain (MEDIA – 192.168.10.0/24). My question is this:

How is it possible to use the MMC from my workstation (on the MEDIA domain) to manage computers in the DATA domain?

Best Answer

This will open AD Users and Computers as a user on the remote domain.

Requires RSAT be installed.

From elevated CMD:

runas /netonly /user:REMOTEDOMAIN\REMOTEUSER "mmc dsa.msc /server=REMOTEDC"

Shamelessly stolen from: https://blog.ed.gs/2013/09/08/rsat-cross-domain/