How to impersonate a Windows domain account on the system account

Hi,

I have the below Powershell command which is calling the SSM Parameter to get the domain username and password. then it start the application "Winrar" using the domain account. This works fine when i run it under the local administrator account.

Powershell script:

===========

$domain = (Get-SSMParameterValue -Name domainName).Parameters[0].Value

$username = (Get-SSMParameterValue -Name domainJoinUserName).Parameters[0].Value

$password = (Get-SSMParameterValue -Name domainJoinPassword -WithDecryption $True).Parameters[0].Value | ConvertTo-SecureString -asPlainText -Force $credential = New-Object System.Management.Automation.PSCredential('labdomain\admin',$password)

Start-Process -FilePath "C:\Program Files\WinRAR\Winrar.exe" -Credential $credential

Issue:

====

When i try to run the same command under the local system account. it throws the below error.

C:\Users\administrator>PsExec.exe -i -s %windir%\system32\WindowsPowerShell\v1.0\PowerShell_ISE.exe

 Start-Process : This command cannot be run due to the error: Access is denied.

At line:5 char:1

• Start-Process 'C:\Program Files\WinRAR\Winrar.exe' -Credential $cr ...

    + CategoryInfo          : InvalidOperation: (:) [Start-Process], InvalidOperationException

    + FullyQualifiedErrorId : InvalidOperationException,Microsoft.PowerShell.Commands.StartProcessCommand