Is there an equivalent of SU for Windows
I am helping my friend to manage a small network at his company. One of two servers they have is a Server 2003 providing terminal services. Another is a Server 2008 SBS running the domain controller, Exchange etc. My part includes helping setting up new user accounts, and configure their terminal server environments. There are things users could do themselves if they were more knowledgeable, but with this process being done only once there is no reason to spend hours on training just for that - how to point a third party app to the right database, how to move the Documents folder to a mapped network drive etc. So I just do it all for them. And that's where the issue comes in - from time to time I have the need to login as them to configure things properly. The company is just several people and the standard practice so far has been - they tell me their password, and I do the rest.
I know this is a very insecure practice and I would like to change this. I am not very experienced with Windows servers and do not know how I, a network administrator, can login as another user. Linux servers have the su command that allows admins to login as other users. Is there anything like this in Windows? Am I looking at it from the wrong side?
In response to Robert and jscott: Yes. Sorry, I could not find that topic. Comments there, however, do not directly help me. A simple practical issue - how to setup user's Outlook signature, bearing in mind that users have different titles, some have direct phone numbers, some have fax etc. A more complicated practical issue - a third party database app needs configuring for every user. I have to login to the app as a database admin, point it to the right database, restart the app. Then login as the db admin again, create a new db user with proper access rights (varying from user to user), setup their db-to-outlook bridge (implemented per user for some reason). All this config is saved in the user's registry, so it is done for every new terminal server user. How do I do that with GPO and/or scripts? Thanks.