runas.exe

Spawn a cmd.exe as a domain user

runas /netonly /user:7MS\pwneduser "C:\windows\system32\cmd.exe"