I am doing a forensic analysis of a Windows machine that has multiple local accounts but have a domain controller or active directory account. I can analyze the files of the user because the files are stored locally but I usually like to mount the dd image as a virtual machine using LiveView an access the users impersonating them. The problem is that I cannot log as the domain controller account because the user is not in the local SAM and I have not got the password.
Can I access the operative system login in as the active directory user?
Can I conver the domain controller account to a local account in order to access the operative system impersonating the user locally?