First of all, download psexec from the Microsoft website.
http://www.microsoft.com/technet/sysinternals/utilities/psexec.mspx
 
 
From and elevated/admin command prompt (cmd.exe, "run as administrator"), run psexec –s cmd.exe

  

C:\>whoami
peter

C:\>psexec -s cmd.exe

PsExec v1.83 – Execute processes remotely
Copyright (C) 2001-2007 Mark Russinovich
Sysinternals – www.sysinternals.com

Microsoft Windows [Version 6.0.6000]
Copyright (c) 2006 Microsoft Corporation.  All rights reserved.

C:\Windows\system32>whoami
nt authority\system

C:\Windows\system32>exit
cmd.exe exited on LAPTOP1 with error code 0.

C:\>
 

Type ‘exit’ to exit the "system" command prompt.
You can launch any other tool from that prompt, and it will inherit your system rights

 

© 2008, Peter Van Eeckhoutte. All rights reserved. Terms of use are applicable to this document.



Related Posts:

Comments are closed.


Meet me at Brucon 2010
Meet me at Brucon 2010 !

Corelan Team Merchandise
You can support Corelan Team by donating or purchasing items from the official Corelan Team merchandising store.

Peter says:
« All of the info and all tools on this blog are free. Keeping this blog in the air is quite expensive.
So if you like what I do and want to show your respect for my work, please consider donating (use the Donate link above)

There is no way I can keep this site up and running without your help.


»     ...     « If you have enjoyed a certain post or like one of my tools, don't forget to vote/rate it !

»     ...     « If you have questions about certain posts, content or tools published on this website, then please use the forums to post questions. Don't write your questions in the Comments section.

»     ...     « If you want to be the first to know about new posts/tools/tutorials on this blog, then subscribe to the mailinglist. Use the 'Subscribe to updates via email' link below (in the Stay posted section)

»
Categories