Blog: Start CMD in NT AUTHORITY\SYSTEM contekst fast with hidden feature in PsExec.exe

Blog
Start CMD in NT AUTHORITY\SYSTEM contekst fast with hidden feature in PsExec.exe

Start CMD in NT AUTHORITY\SYSTEM contekst fast with hidden feature in PsExec.exe

Sweede

I just heard about this hidden feature of PSEXEC.EXE run cmd first as administrator

and then PSEXEC.EXE -sid cmd

this will bring up a new cmd windows in NT AUTHORITY\SYSTEM contekst

PSEXEC.EXE is the tool from Mark Russinovich

Regards

Sweede

Aaron Cool 1 years 1 months 9 days 44 mins ago

You can use PSEXEC.exe on the K1000 to mimic scripts as Local System Account - http://www.kace.com/support/resources/kb/article/How-to-mimic-running-a-script-as-Local-System-User-Scripting
elgoosea 1 years 22 days 6 mins ago

This is possibly one of the most useful tools I have ever found as an Administrator.
adilrathore 1 years 16 days 44 mins ago

I needed this badly... thanks!
mazessj 11 months 24 days 30 mins ago last edited 11 months 24 days 30 mins ago

This is not a hidden feature. It's three commands stacked together, all of which are covered in the built-in help:

-s Run the remote process in the System account.
-i Run the program so that it interacts with the desktop.
-d Don't wait for the process to terminate.

Please log in to comment