Ce site est optimisé pour être consulté depuis un navigateur moderne dans lequel JavaScript est activé.

Existe-t-il un équivalent de SU pour Windows ?

ayi

Is there a way (when logged in as an administrator, ou as a member of le administrators group) to masquerade as a non-privileged user? Especially in an AD environment.

e.g., in le Unix world I could do le suivant (as root):

# whoami
root
# su johnsmith
johnsmith> whoami
johnsmith
johnsmith> exit
# exit

J'ai besoin de to test/configure something on a user's account, et Je ne want to have to know leur password ou have to reset it.

Modification :

runas ne va pas cut it. Ideally, mon whole desktop would become le user's, etc. et pas juste in a cmd window.

ayi

Je suis pretty certain there is no supported way to run as a différent user sans having that user's credentials. C'est a non-repudiation measure. Someone ne peut pas say: "Je n'ai pas do it", parce que soit they did it, ou someone avec leur credentials did it. And for le second they'd have to give le autre person le credentials.

Normally how I do what J'ai besoin de to do tandis que logged in as another user is to use remote assistance to essentially RDP into le session, et have them grant me control. Then I do whatever tandis que they're watching (presumably, anyway).

Anything else can usually be done avec GPO/scripts.