Is there a way to login as another user within a domain? I'm an Administrator and often have people come to me with problems. Most of the time I'm unable to test to see if I've fixed their problem since they aren't there when I work on their computer. I have to login as Admin, but sometimes the problem comes back because of startup programs they have running or different profiles (when browser related)

Is there a way for me to login to their account using my administrator account? Or if not, is there a way to change their password using ssh, login, and then somehow change it back to whatever it was?

We're running Samba's Domain Server on a linux box. All of the computers are windows machines.

To change someone's password I use: smbldap-passwd usern. I just don't know how to get it back the way it was.

If you are logged in as root then use su username to login with that particular user account.

thanks. that's how I access my root account using my username when I ssh into the server, but I was curious as to if there was a way to do that using a Windows PC which is connecting to the Domain on the Samba Linux Server. I think the user database uses LDAP Authentication.

Well I don't think so that there will be a way by which you can change the user password for logging in and then change it back to what it was because it is a security breach and OS can't allow that.

I have just tested it with simple passwd and shadow files and you can't do that. This is what I did:

1. In passwd I copied the line user01:x:501:501::/home/user01:/bin/bash and pasted it at the end of the passwd file. Then I # out the original line.
2. Same I did in /etc/shadow file.
3. Ran passwd user01 and changed the password.
4. Logged in with user01 with the new password.
5. Exited session and logged back in as root and checked /etc/passwd file and deleted the line that I added at the bottom and removed the # sign from the original line.
6. And when I checked /etc/shadow wow!! the line that I # out was gone. It updated the file at the moment I ran passwd user01.

That is how the OS security works you just can't do that, otherwise someone can do the same with root user account ;-) and you will never come to know that the security has been compromised.