Management Console

Manangement Console with RSAT Snap-ins can be used to enumerate AD Environment.

• On a Domain joined machine

• Via runsas.exe

runas /netonly /user:<domain>\<username> mmc.exe