Here was my scenario I found myself in not to long ago. I have an Active Directory domain with a server outside of the domain in it’s own workgroup. It used different credentials for the administrator account then what the domain uses. One day it stopped responding to RDP and several control programs we have on it so we needed to do a reboot.
No problems right? just type in the command below:
shutdown /r /t 3 /m \\ServerName
Not so right, right off the bat we get ServerName: Access is denied.(5)
That’s right we do not have permissions “Yet”… But how do we send permissions to shutdown.exe ? If you do a shutdown /? you will find no switches for username and password but there is a way around this.
We will connect to the servers IPC$ and authenticate then we will run our command. Here is what you do:
First lets make a connection and authenticate by running the following cmd:
NET USE \\MyServer\IPC$ mypassword /USER:myuser
If successful then we are now ready to run the shutdown cmd in the same window:
shutdown /r /t 3 /m \\ServerName
Wait a few seconds and and you should get back your prompt which tells you the command was sent successfully. You now have authenticated and sent the shutdown cmd to a remote server using different permissions.
I hope this helps someone out there
Enjoy
Cubert