I recently changed the network at my job so users log in to the domain and have their settings and files hosted on the server, where previously they logged in to local accounts on each computer and had permissions to access server files stores. The only real downside is that, if I log into a user's machine remotely (I use logmein, which lets you control a computer as if you were sitting in front of it - we're a small business, we don't have the need or budget for anything more elaborate), I have to log in as an account I know the password for. I'd like to be able to log in to user's accounts for troubleshooting, so I can have the exact same environment as the user.
However, I don't want to just have a list of everyone's passwords. It's feasible (there are less than 10 of us), but besides the security issue and the problem of maintaining it, I've spent the last 2 years drilling basic password security into my user's heads and it's actually starting to get through. Asking for their passwords would undo that.
So, is there a way to log in to a user's account without their password? Can a second password be set up, or some other way to log in that doesn't disrupt the user's normal login? Is there a better way of getting the exact same environment a user has that I'm missing?
I'm a domain admin and have full access to everything on the network.