runas.exe

Runas.exe (a native binary) can be used to authenticate over the network even if the machine is not domain-joined to Active Directory. Since /netonly is specified, all network authentication uses the specified user’s identity. To supply credentials, use something like Mimikatz to inject a ticket into memory.

runas.exe /netonly /user:<domain>\<username> cmd.exe

To check if credentials work (on a non-domain-joined machine), set DNS server to DC IP then try to list SYSVOL (all AD users have permissions to list):

dir \\FQDN\SYSVOL