Editing <span id="firstHeadingTitle">Commands</span>
Read
Edit
View history
Not logged in
Talk
Contributions
Create account
Log in
Editing
Commands
Warning:
You are not logged in. Your IP address will be publicly visible if you make any edits. If you
log in
or
create an account
, your edits will be attributed to your username, along with other benefits.
Anti-spam check. Do
not
fill this in!
This page includes both cmd and powershell commands, realistically, all of them should run from powershell anyway. = IP Configuration (ipconfig) = The ipconfig command is a command-line utility used to display and manage the IP address assigned to a machine. == ipconfig [CMD] == ipconfig Displays the basic TCP/IP configuration for all adapters. == ipconfig /all [CMD] == ipconfig /all Displays the full TCP/IP configuration for all adapters. == ipconfig /release [CMD] == ipconfig /release Releases the IP address assigned to the computer. == ipconfig /renew [CMD] == ipconfig /renew Renews the IP address assigned to the computer. == ipconfig /flushdns [CMD] == ipconfig /flushdns Purges the DNS resolver cache. == ipconfig /registerdns [CMD] == ipconfig /registerdns Refreshes DHCP leases and re-registers DNS names. == ipconfig /displaydns [CMD] == ipconfig /displaydns Displays DNS cache contents. == ipconfig (IPv6 & advanced) [CMD] == ipconfig /allcompartments ipconfig /release6 ipconfig /renew6 ipconfig /showclassid ipconfig /setclassid ipconfig /showclassid6 ipconfig /setclassid6 ipconfig /flushdns6 = Windows Repair (USE THIS IF WINDOWS IS ACTING UP) = == DISM RestoreHealth [CMD] == DISM /Online /Cleanup-Image /RestoreHealth == SFC Scan (run after DISM) [CMD] == SFC /scannow == SFC Scan (after reboot) [CMD] == SFC /scannow = Reset Internet Settings (Fixes a surprisingly large amount of problems with ms office) [CMD] = RunDll32.exe InetCpl.cpl,ResetIEtoDefaults = Network Drive Management = == List Mapped Drives [CMD] == net use == Remove Mapping [CMD] == net use <drive letter>: /delete == Recreate Mapping [CMD] == net use <drive letter>: \\server\share /persistent:yes == Delete All Mappings [CMD] == net use * /delete == Persistently Map Drive [CMD] == net use /persistent:yes h: \\VBoxSvr\Win11\Documents = User Management = == Create Local User [CMD] == net user "user.name" password /add == Add to Administrators [CMD] == net localgroup administrators "user.name" /add == Remove from Administrators [CMD] == net localgroup administrators "user.name" /delete == Delete User [CMD] == net user "user.name" /delete == Disable Built-in Accounts [CMD] == net user "Administrator" /active:no net user "Guest" /active:no = Power & System = == Disable Hibernation [CMD] == powercfg.exe /Hibernate off == Compact OS [CMD] == Compact.exe /CompactOS:always == Rename Computer [PowerShell] == Rename-Computer -NewName "YourNewHostname" = Sessions = == List Sessions [CMD] == query session == Logoff Session [CMD] == logoff {number} = Windows Fixes = == Fix Windows 11 Right Click [CMD] == reg.exe add "HKCU\Software\Classes\CLSID\{86ca1aa0-34aa-4e8b-a509-50c905bae2a2}\InprocServer32" /f /ve == Make Edge Alt Key not focus settings [CMD] == reg add HKLM\SOFTWARE\Policies\Microsoft\Edge /v ConfigureKeyboardShortcuts /d {"disabled":["focus_settings_and_more"]} == Disable Widgets [CMD] == reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced /v TaskbarDa /t REG_DWORD /d 0 == Fix Windows Update Missing [CMD] == reg delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer" /v SettingsPageVisibility /f == Disable Telemetry (May auto-undo itself on non-enterprise windows versions) [CMD] == reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\DataCollection /v AllowTelemetry /t REG_DWORD /d 0 /f = Active Directory = == Check Password Expiry [PowerShell] == Get-ADUser -identity INSERTclientUSERNAMEHERE -properties PasswordLastSet, PasswordExpired, PasswordNeverExpires | ft Name, PasswordLastSet, PasswordExpired, PasswordNeverExpires == Force AD Sync [PowerShell] == start-adsyncsynccycle -policytype delta == Join Domain [PowerShell] == add-computer -domainname "YourDomainName" -restart = Apps & Installation = == Install New Teams [PowerShell] == Add-ProvisionedAppPackage -Online -PackagePath "MSTeams-x64.msix" -SkipLicense == Install OpenSSH [PowerShell] == Add-WindowsCapability -Online -Name OpenSSH.Server Start-Service sshd Set-Service -Name sshd -StartupType 'Automatic' == Install RSAT [PowerShell] == Get-WindowsCapability -Name RSAT* -Online | Add-WindowsCapability -Online == Install Vim (System Wide) [PowerShell] == mkdir vim-install; cd vim-install; $ProgressPreference = 'SilentlyContinue'; Invoke-Webrequest -UseBasicParsing https://github.com/vim/vim-win32-installer/releases/download/v9.1.0/gvim_9.1.0_x86_signed.zip -o gvim.zip; Expand-Archive -Path gvim.zip -DestinationPath .; cp .\vim\vim91\vim.exe C:\windows\system32\vim.exe == Install Vim (User Only) [PowerShell] == mkdir vim-install; cd vim-install; $ProgressPreference = 'SilentlyContinue'; Invoke-Webrequest -UseBasicParsing https://github.com/vim/vim-win32-installer/releases/download/v9.1.0/gvim_9.1.0_x86_signed.zip -o gvim.zip; Expand-Archive -Path gvim.zip -DestinationPath .; cp .\vim\vim91\vim.exe $env:LOCALAPPDATA\Microsoft\WindowsApps\vim.exe == Install Git [PowerShell] == winget install --id Git.Git -e --source winget --scope user = Services = == List Services [PowerShell] == Get-Service == Set Auto Start [PowerShell] == Set-Service -Name {servicename} -StartupType Automatic == Manage Service [PowerShell] == Start-Service {servicename} Stop-Service {servicename} Restart-Service {servicename} = Networking (Advanced) = == Remove Default Gateway [PowerShell] == Remove-NetRoute -InterfaceAlias "{get this name from Get-NetAdapter}" -DestinationPrefix 0.0.0.0/0 == Set IP Address [PowerShell] == Get-NetAdapter -Name '{get this name from Get-NetAdapter}' | New-NetIPAddress -IPAddress {newIP} -PrefixLength {cidr} == Allow Ping [CMD] == netsh advfirewall firewall add rule name="ICMP Allow incoming V4 echo request" protocol=icmpv4:8,any dir=in action=allow == Show WiFi Passwords [CMD] == for /f "skip=9 tokens=1,2 delims=:" %i in ('netsh wlan show profiles') do @if "%j" NEQ "" (echo SSID: %j & netsh wlan show profiles %j key=clear | findstr "Key Content") == Disable WiFi Scanning [CMD] == netsh wlan set autoconfig enabled=no interface="Wi-Fi" == Enable WiFi Scanning [CMD] == netsh wlan set autoconfig enabled=yes interface="Wi-Fi" = Storage & Files = == Resize VHD [PowerShell] == resize-vhd -path "f:\Shares\profiledisks" -Sizebytes 30GB == Robocopy Migration [CMD] == robocopy "C:\users\awesome.guy" "D:\users\awesome.guy" /E /COPYALL /zb /r:10 /w:10 /tee /unilog+:"D:\robocopylog.txt" = DNS & Group Policy = == Add DNS Suffix [PowerShell] == Set-DnsClientGlobalSetting -SuffixSearchList @("corp.mariocorp.com") == Force GP Update [CMD] == gpupdate.exe /force = Misc = == Firefox Profile Manager [CMD] == "C:\Program Files\Mozilla Firefox\firefox.exe" --ProfileManager == Ping with Timestamp [PowerShell] == ping google.com -t | % { "$(Get-Date -Format 'yyyy-MM-dd HH:mm:ss') $_" } == Open a Command Prompt as SYSTEM == === PSExec Method (Requires installing PSExec) [PowerShell] === The oneliner below installs psexec for you and uses it to open the SYSTEM cmd. Needs an elevated powershell prompt. Invoke-WebRequest -Uri "https://download.sysinternals.com/files/PSTools.zip" -OutFile "$env:TEMP\PSTools.zip"; Expand-Archive "$env:TEMP\PSTools.zip" -DestinationPath "$env:TEMP\PSTools" -Force; & "$env:TEMP\PSTools\PsExec64.exe" -accepteula -i -s -d cmd.exe /k "title NT AUTHORITY\SYSTEM - whoami && whoami" If it has been run before, you can open the prompt with just: ;& "$env:TEMP\PSTools\PsExec64.exe" -i -s -d cmd.exe === UAC Method (May trip antivirus but does not require external tools) === This method uses the UAC secure desktop (via On-Screen Keyboard trick) to launch cmd.exe as '''NT AUTHORITY\SYSTEM''' without third-party tools. ==== Setup (run once as Administrator) ==== <pre> reg add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\osk.exe" /v Debugger /t REG_SZ /d "cmd.exe" /f </pre> ==== Trigger SYSTEM cmd ==== # Open any program '''as Administrator''' so the UAC prompt appears. # While the UAC dialog is visible (dark background), press '''Win + U''' to open Ease of Access Center. # Click '''On-Screen Keyboard'''. # A Command Prompt running as '''SYSTEM''' should appear on the secure desktop. ==== Cleanup (run as Administrator when done) ==== <pre> reg delete "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\osk.exe" /f </pre> '''Note:''' This works because the secure desktop runs with SYSTEM privileges. The cmd window will appear only while the UAC prompt is active.
Summary:
Please note that all contributions to Lucca's Wiki may be edited, altered, or removed by other contributors. If you do not want your writing to be edited mercilessly, then do not submit it here.
You are also promising us that you wrote this yourself, or copied it from a public domain or similar free resource (see
Lucca's Wiki:Copyrights
for details).
Do not submit copyrighted work without permission!
Cancel
Editing help
(opens in new window)
🎨 Theme Settings
Quick Presets
Code & Pre Block Text Color
Code / Pre Text Color
Background
Primary Background
Secondary Background
Tertiary Background
Hover Background
Text
Primary Text
Secondary Text
Muted Text
Accent & Borders
Accent
Accent Dim
Border
Border 2
Header & Sidebar
Header Start
Header End
Sidebar Background
Status Colors
Success
Danger
Warning
Reset to Default
Save & Close