psexec to the rescue again:
psexec \\%rsys% -u DOMAIN\%user% mmc.exe lusrmgr.msc
note: both the current and remote computer must be trusting the AD belonging to DOMAIN, otherwise you will get an access denied message.
–jeroen
via: LUSRMGR von Remote aufrufen – Windows – Administrator.
