{
	"id": "071cf3ea-2855-402c-a9d5-58ec54f33bca",
	"created_at": "2026-04-06T01:31:43.829921Z",
	"updated_at": "2026-04-10T03:20:24.684783Z",
	"deleted_at": null,
	"sha1_hash": "54b92fb1c87b108d7e5f6a9e4b785c4288c35a23",
	"title": "Runas",
	"llm_title": "",
	"authors": "",
	"file_creation_date": "0001-01-01T00:00:00Z",
	"file_modification_date": "0001-01-01T00:00:00Z",
	"file_size": 58296,
	"plain_text": "Runas\r\nArchived: 2026-04-06 00:36:25 UTC\r\nAllows a user to run specific tools and programs with different permissions than the user's current logon provides.\r\nrunas [{/profile|/noprofile}] [/env] [/netonly] [/smartcard] [/showtrustlevels] [/trustlevel]\r\n**/user:**UserAccountName program\r\n/profile   : Loads the user's profile. /profile is the default.\r\n/no profile   : Specifies that the user's profile is not to be loaded. This allows the application to load more quickly,\r\nbut it can also cause a malfunction in some applications.\r\n/env   : Specifies that the current network environment be used instead of the user's local environment.\r\n/netonly   : Indicates that the user information specified is for remote access only.\r\n/smartcard   : Indicates whether the credentials are to be supplied from a smartcard.\r\n/showtrustlevels   : Lists the /trustlevel options.\r\n/trustlevel   : Specifies the level of authorization at which the application is to run. Use /showtrustlevels to see\r\nthe trust levels available.\r\n/user: UserAccountName   : Specifies the name of the user account under which to run the program. The user\r\naccount format should be user@domain or Domain\\User.\r\nprogram   : Specifies the program or command to run using the account specified in /user.\r\n/?   : Displays help at the command prompt.\r\nIt is good practice for administrators to use an account with restrictive permissions to perform routine,\r\nnonadministrative tasks, and to use an account with broader permissions only when performing specific\r\nadministrative tasks. To accomplish this without logging off and back on, log on with a regular user\r\naccount, and then use the runas command to run the tools that require the broader permissions.\r\nFor examples of the use of the runas command, see Related Topics.\r\nThe use of runas is not restricted to administrator accounts, although that is the most common use. Any\r\nuser with multiple accounts can use runas to run a program, MMC console, or Control Panel item with\r\nalternate credentials.\r\nIf you want to use the Administrator account on your computer, for the /user: parameter, type one of the\r\nfollowing:\r\n/user: AdministratorAccountName @ ComputerName\r\nhttps://technet.microsoft.com/en-us/library/bb490994.aspx\r\nPage 1 of 3\n\n/user: ComputerName \\ AdministratorAccountName\r\nIf you want to use this command as a domain administrator, type one of the following:\r\n/user: AdministratorAccountName @ DomainName\r\n/user: DomainName \\ AdministratorAccountName\r\nWith the runas command, you can run programs (*.exe), saved MMC consoles (*.msc), shortcuts to\r\nprograms and saved MMC consoles, and Control Panel items. You can run them as an administrator while\r\nyou are logged on to your computer as a member of another group, such as the Users or Power Users\r\ngroup.\r\nYou can use the runas command start any program, MMC console, or Control Panel item. As long as you\r\nprovide the appropriate user account and password information, the user account has the ability to log on to\r\nthe computer, and the program, MMC console, or Control Panel item is available on the system and to the\r\nuser account.\r\nWith the runas command, you can administer a server in another forest (the computer from which you run\r\na tool and the server you administer are in different domains).\r\nIf you try to start a program, MMC console, or Control Panel item from a network location using runas, it\r\nmight fail because the credentials used to connect to the network share are different from the credentials\r\nused to start the program. The latter credentials may not be able to gain access to the same network share.\r\nSome items, such as the Printers folder and desktop items, are opened indirectly and cannot be started with\r\nthe runas command.\r\nIf the runas command fails, the Secondary Logon service might not be running or the user account you\r\nare using might not be valid. To check the status of the Secondary Logon service, in Computer\r\nManagement, click Services and Applications, and then click Services. To test the user account, try\r\nlogging on to the appropriate domain using the account.\r\nTo start an instance of the command prompt as an administrator on the local computer, type:\r\nrunas /user: localmachinename \\administrator cmd \r\nWhen prompted, type the administrator password.\r\nTo start an instance of the Computer Management snap-in using a domain administrator account called\r\ncompanydomain\\domainadmin, type:\r\nrunas /user:companydomain\\domainadmin \"mmc %windir% \\system32\\compmgmt.msc\" \r\nWhen prompted, type the account password.\r\nTo start an instance of Notepad using a domain administrator account called user in a domain called\r\ndomain.microsoft.com, type:\r\nhttps://technet.microsoft.com/en-us/library/bb490994.aspx\r\nPage 2 of 3\n\nrunas /user:user@domain.microsoft.com \"notepad my_file.txt\" \r\nWhen prompted, type the account password.\r\nTo start an instance of a command prompt window, saved MMC console, Control Panel item, or program that will\r\nadminister a server in another forest, type:\r\nrunas /netonly /user: domain\\username \"command\"  \r\ndomain\\username must be a user with sufficient permissions to administer the server. When prompted, type the\r\naccount password.\r\nFormat Meaning\r\nItalic Information that the user must supply\r\nBold\r\nElements that the user must type exactly as\r\nshown\r\nEllipsis (...)\r\nParameter that can be repeated several times in a\r\ncommand line\r\nBetween brackets ([]) Optional items\r\nBetween braces ({}); choices separated by pipe (|).\r\nExample: {even|odd}\r\nSet of choices from which the user must choose\r\nonly one\r\nCourier font Code or program output\r\nCmd\r\nCommand-line reference A-Z\r\nCreate a shortcut using runas command parameters\r\nSource: https://technet.microsoft.com/en-us/library/bb490994.aspx\r\nhttps://technet.microsoft.com/en-us/library/bb490994.aspx\r\nPage 3 of 3",
	"extraction_quality": 1,
	"language": "EN",
	"sources": [
		"MITRE"
	],
	"references": [
		"https://technet.microsoft.com/en-us/library/bb490994.aspx"
	],
	"report_names": [
		"bb490994.aspx"
	],
	"threat_actors": [],
	"ts_created_at": 1775439103,
	"ts_updated_at": 1775791224,
	"ts_creation_date": 0,
	"ts_modification_date": 0,
	"files": {
		"pdf": "https://archive.orkl.eu/54b92fb1c87b108d7e5f6a9e4b785c4288c35a23.pdf",
		"text": "https://archive.orkl.eu/54b92fb1c87b108d7e5f6a9e4b785c4288c35a23.txt",
		"img": "https://archive.orkl.eu/54b92fb1c87b108d7e5f6a9e4b785c4288c35a23.jpg"
	}
}