How to run powershell scriptblock as domain user?

Question

I have a script block that I'm trying to make it run as a different domain user.

$Username = 'domain\test'
$Password = '1234'
$pass = ConvertTo-SecureString -AsPlainText $Password -Force
$cred = New-Object System.Management.Automation.PSCredential -ArgumentList $UserName,$pass

Invoke-Command -ScriptBlock{
write-host "hello"

} -Credential $cred -ComputerName $env:COMPUTERNAME

When I run it I got the following error:

[test-pc] Connecting to remote server test-pc failed with the following error message : The client cannot connect to the destination specified in the request. Verify that the service on the destination is running and is accepting requests.
 Consult the logs and documentation for the WS-Management service running on the destination, most commonly IIS or WinRM. If the destination is the WinRM service, run the following command on the destination to analyze and configure the WinRM se
rvice: "winrm quickconfig". For more information, see the about_Remote_Troubleshooting Help topic.

Why the script is trying to authenticate locally and not against the DC ? Thanks

Is the WS-Management service running on the remote computer? If you're trying to use PowerShell remoting it needs to be enabled and the correct ports need to be open. I don't think you're even being authenticated yet. — Jason Shave
– Jason Shave, Commented Oct 12, 2018 at 14:18
Have you setup WinRM on the remote server to accept WinRM? Have you been through the steps in about_Remote_Troubleshooting ? learn.microsoft.com/en-us/powershell/module/… — yaquaholic
– yaquaholic, Commented Oct 12, 2018 at 14:19
I have a lab with a Windows 10 client and a DC (2012 R2). When I execute my script on the client , I want to use another domain account. — isoman
– isoman, Commented Oct 12, 2018 at 14:24
The error message tells you what you need to do. Go on your 2012 R2 box, open PowerShell as admin and type in winrm quickconfig — jrider
– jrider, Commented Oct 12, 2018 at 14:30
I want to execute manage-bde with a specific domain user. That is my objective. All the commands are going to be executed locally , th eonly thing that happens remotely is the authentication with the AD. — isoman
– isoman, Commented Oct 12, 2018 at 15:49

henrycarteruk · Accepted Answer · 2021-02-03 16:49:22Z

2

If you don't actually want to run the script remotely, you can use Start-Process to run Powershell as another user, which will then execute your command/script as that user.

(See powershell command line help for full syntax options and examples)

# Using Get-Credential to illustrate, substitute with your own credential code
$cred = Get-Credential

# Run Command:
Start-Process -FilePath Powershell -Credential $cred -ArgumentList '-Command', 'Write-Host "Hello"'

# Run Script:    
Start-Process -FilePath Powershell -Credential $cred -ArgumentList '-File', 'C:\folder\script.ps1'

edited Feb 3, 2021 at 16:49

answered Oct 12, 2018 at 15:47

henrycarteruk

13.3k2 gold badges40 silver badges40 bronze badges

Sign up to request clarification or add additional context in comments.

3 Comments

isoman Over a year ago

is it possible to use it with a scriptblock ?

henrycarteruk Over a year ago

Yes, -Command accepts a scriptblock, see the link I included as it covers this.

henrycarteruk Over a year ago

@Nae How nice of MS to not redirect the original url, I've now updated it.

Collectives™ on Stack Overflow

How to run powershell scriptblock as domain user?

1 Answer 1

3 Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

3 Comments

Your Answer

Sign up or log in

Post as a guest

Related