PsExec's most powerful uses include launching interactive command-prompts on remote systems and remote-enabling tools like IpConfig that otherwise do not have the ability to show information about remote systems.

October 4, 2013 - Hi all, I am new here, i just want to use psexec tools… as i am just system administrator not domain admin so i dont know domain password… As i gone throu some pages after i got this syntax (psexec \computername cmd -u administrator -p “adminpassword”) i don want to explicit my password ...

July 29, 2025 - Maybe you’d rather use PowerShell Remoting to handle your remote access duties. Have no fear, PsExec is here. You can use PsExec to initiate the ‘winrm quickconfig’ command to enable your access. psexec \ws16-dc2 -s c:windowssystem32winrm.cmd quickconfig -quiet

January 29, 2013 - Hi all, is it possible to open a application remotely. ( i.e if the remote machine has msoffice is installed, i want to open that msoffice to my current machine ). because i want to run a schedule program in several ma…

March 5, 2026 - psexec \\lon-srv01 powershell -ExecutionPolicy RemoteSigned -command "'{0:N2}' -f ((gci C:\PS | measure Length -Sum).Sum/1MB)" Note. You can use the Invoke-Command cmdlet instead of PsExec to run commands remotely with PowerShell.

I conclude from the following experiment that what you're trying to do can not be done, as of psexec v2.43, and as tried on both a Windows 10 and a Windows 11 machine: The following juxtaposes a local invocation using a simple test command with a remote one; the test command tries to use -i in combination with -s to run a PowerShell command visibly on the target machine, which, after a delay of 3 seconds sends keystrokes (exit + Enter) to its own window to auto-close it:

January 17, 2023 - PsExec uses the Microsoft Windows Service Control Manager (SCM) to start an instance of the service on the remote system, which allows the tool to run the specified command or application with the account’s privileges of the service account ...

March 3, 2026 - PsExec is a command-line utility from Microsoft’s Sysinternals suite used to execute processes on remote systems or locally with elevated privileges.

We cannot provide a description for this page right now

November 12, 2025 - This command will delete the file users.txt from the remote computer. psexec \\pc1 cmd /c del /f c:\it\users.txt · In this example, I will stop and start the spooler service on a remote computer · psexec \\pc1 net stop spooler · To start the spooler service use this command.

April 3, 2023 - Your new best friend: Introducing BloodHound Community Edition!

February 26, 2026 - Lateral movement relies on nltest for domain controller discovery followed by WMI or PsExec to deliver and run reverse SOCKS5 proxy clients inside the network.

February 5, 2020 - In this case, we can use PsExec to pass an encrypted credential to the remote system to execute our command. To run an interactive remote command prompt as a different user, run the following command: psexec \\REMOTE cmd.exe -i -u domain.local\admin ...

To test your command manually from a Command Prompt, you can run it with the PsExec utility from Microsoft's Sysinternals suite, which takes option -s to execute commands as the SYSTEM user....

April 20, 2021 - Observability and Service Mgmt Cloud · This is community contributed "How to" tips, best practices, and general helps to get the most out of your product, so please share your knowledge! Have questions about your product? Click on the "Discussions" tab above and post your questions there

August 13, 2024 - $ impacket-psexec · $ impacket-raiseChild · $ impacket-rbcd · $ impacket-rdp_check · $ impacket-reg · $ impacket-registry-read · $ impacket-rpcmap · $ impacket-sambaPipe · $ impacket-services · $ impacket-smbclient · $ impacket-smbexec · $ impacket-smbserver ·

February 4, 2026 - Library, learning resources, downloads, support, and community. Evaluate and find out how to install, deploy, and maintain Windows with Sysinternals utilities.

June 12, 2024 - psexec \\REMOTE cmd.exe -i -u domain.local\admin -p password