Getting a CMD prompt as SYSTEM in Windows Vista and Windows Server 2008

re: Getting a CMD prompt as SYSTEM in Windows Vista and Windows Server 2008

NedPyle [MSFT] — Thu, 23 Apr 2009 16:01:18 GMT

Hi,

Did you try the method above in section:

"Method two and a half – REMOTE and the Task Scheduler"

That gives the example of doing it with Network Service, and should work fine.

re: Getting a CMD prompt as SYSTEM in Windows Vista and Windows Server 2008

permb — Thu, 23 Apr 2009 15:13:05 GMT

Any idea on how to achieve the same thing for NT_AUTHORITY\NetworkService (S-1-5-20)? I tried using schtasks /RU S-1-5-20 to run cmd.exe but it never showed up as an interactive window.

Thanks

SandeepAnand — Thu, 22 Jan 2009 13:47:12 GMT

Thanks,

You and Mark Russinovich rule.

Sandeep

re: Getting a CMD prompt as SYSTEM in Windows Vista and Windows Server 2008

NedPyle [MSFT] — Thu, 23 Oct 2008 16:48:33 GMT

This is why I love working at MS - I get to hear interesting, clever ideas from customers all the time about how they do things. Thanks very much for telling us your technique, guyrleech. :)

- Ned

re: Getting a CMD prompt as SYSTEM in Windows Vista and Windows Server 2008

guyrleech — Thu, 23 Oct 2008 12:17:11 GMT

Another way is to use good old srvany.exe and create a service (via sc.exe) that uses this as the service binary to launch cmd.exe. On Vista, I make this service dependent on the "Interactive Services Detection" service in order to actually get a console window.

Since I run as a non-admin user for security, I have used subinacl to set the permissions on my service to allow me to stop and start it so I can get a system cmd prompt via a "net start" shortcut on my desktop. Obviously wouldn't do this on shared systems!

Does need installing compared with the other methods but worth doing on certain systems in my experience.

re: Getting a CMD prompt as SYSTEM in Windows Vista and Windows Server 2008

NedPyle [MSFT] — Thu, 23 Oct 2008 04:19:24 GMT

I will be updating this KB article with all the new ones. There were of course a few more added, not sure why I didn't remember them (just RODC alone added 3 new groups).

Thanks for bringing this up Christopher!

- Ned

re: Getting a CMD prompt as SYSTEM in Windows Vista and Windows Server 2008

NedPyle [MSFT] — Wed, 22 Oct 2008 22:54:04 GMT

Mmmph - no clue! I'm not even sure if there were any new ones added to be honest. I'll check and reply back here.

- Ned

re: Getting a CMD prompt as SYSTEM in Windows Vista and Windows Server 2008

Christopher_G_Lewis — Wed, 22 Oct 2008 22:46:39 GMT

Any idea when this article ( http://support.microsoft.com/default.aspx?scid=kb;EN-US;243330 ) will be updated with well known sids for Vista & Server 2008?