I'm doing some exercises on a challenge lab. I'm SYSTEM on the Forest PDC.
I need to figure out the SID of a local user on a machine in another domain in the forest.
I can get there with PTH and run a command locally, but my exercises say I should be able to do that without leaving the PDC.
In Windows, how can you query local users on a domain joined workstation, when you're domain admin?