Latest revision as of 21:23, 2 April 2026

This page includes both cmd and powershell commands, realistically, all of them should run from powershell anyway.

IP Configuration (ipconfig)[edit]

The ipconfig command is a command-line utility used to display and manage the IP address assigned to a machine.

ipconfig [CMD][edit]

ipconfig

Displays the basic TCP/IP configuration for all adapters.

ipconfig /all [CMD][edit]

ipconfig /all

Displays the full TCP/IP configuration for all adapters.

ipconfig /release [CMD][edit]

ipconfig /release

Releases the IP address assigned to the computer.

ipconfig /renew [CMD][edit]

ipconfig /renew

Renews the IP address assigned to the computer.

ipconfig /flushdns [CMD][edit]

ipconfig /flushdns

Purges the DNS resolver cache.

ipconfig /registerdns [CMD][edit]

ipconfig /registerdns

Refreshes DHCP leases and re-registers DNS names.

ipconfig /displaydns [CMD][edit]

ipconfig /displaydns

Displays DNS cache contents.

ipconfig (IPv6 & advanced) [CMD][edit]

ipconfig /allcompartments
ipconfig /release6
ipconfig /renew6
ipconfig /showclassid
ipconfig /setclassid
ipconfig /showclassid6
ipconfig /setclassid6
ipconfig /flushdns6

Windows Repair (USE THIS IF WINDOWS IS ACTING UP)[edit]

DISM RestoreHealth [CMD][edit]

DISM /Online /Cleanup-Image /RestoreHealth

SFC Scan (run after DISM) [CMD][edit]

SFC /scannow

SFC Scan (after reboot) [CMD][edit]

SFC /scannow

Reset Internet Settings (Fixes a surprisingly large amount of problems with ms office) [CMD][edit]

RunDll32.exe InetCpl.cpl,ResetIEtoDefaults

Network Drive Management[edit]

List Mapped Drives [CMD][edit]

net use

Remove Mapping [CMD][edit]

net use <drive letter>: /delete

Recreate Mapping [CMD][edit]

net use <drive letter>: \\server\share /persistent:yes

Delete All Mappings [CMD][edit]

net use * /delete

Persistently Map Drive [CMD][edit]

net use /persistent:yes h: \\VBoxSvr\Win11\Documents

User Management[edit]

Create Local User [CMD][edit]

net user "user.name" password /add

Add to Administrators [CMD][edit]

net localgroup administrators "user.name" /add

Remove from Administrators [CMD][edit]

net localgroup administrators "user.name" /delete

Delete User [CMD][edit]

net user "user.name" /delete

Disable Built-in Accounts [CMD][edit]

net user "Administrator" /active:no
net user "Guest" /active:no

Power & System[edit]

Disable Hibernation [CMD][edit]

powercfg.exe /Hibernate off

Compact OS [CMD][edit]

Compact.exe /CompactOS:always

Rename Computer [PowerShell][edit]

Rename-Computer -NewName "YourNewHostname"

Sessions[edit]

List Sessions [CMD][edit]

query session

Logoff Session [CMD][edit]

logoff {number}

Windows Fixes[edit]

Fix Windows 11 Right Click [CMD][edit]

reg.exe add "HKCU\Software\Classes\CLSID\{86ca1aa0-34aa-4e8b-a509-50c905bae2a2}\InprocServer32" /f /ve

Make Edge Alt Key not focus settings [CMD][edit]

reg add HKLM\SOFTWARE\Policies\Microsoft\Edge /v ConfigureKeyboardShortcuts /d {"disabled":["focus_settings_and_more"]}

Disable Widgets [CMD][edit]

reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced /v TaskbarDa /t REG_DWORD /d 0

Fix Windows Update Missing [CMD][edit]

reg delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer" /v SettingsPageVisibility /f

Disable Telemetry (May auto-undo itself on non-enterprise windows versions) [CMD][edit]

reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\DataCollection /v AllowTelemetry /t REG_DWORD /d 0 /f

Active Directory[edit]

Check Password Expiry [PowerShell][edit]

Get-ADUser -identity INSERTclientUSERNAMEHERE -properties PasswordLastSet, PasswordExpired, PasswordNeverExpires | ft Name, PasswordLastSet, PasswordExpired, PasswordNeverExpires

Force AD Sync [PowerShell][edit]

start-adsyncsynccycle -policytype delta

Join Domain [PowerShell][edit]

add-computer -domainname "YourDomainName" -restart

Apps & Installation[edit]

Install New Teams [PowerShell][edit]

Add-ProvisionedAppPackage -Online -PackagePath "MSTeams-x64.msix" -SkipLicense

Install OpenSSH [PowerShell][edit]

Add-WindowsCapability -Online -Name OpenSSH.Server
Start-Service sshd
Set-Service -Name sshd -StartupType 'Automatic'

Install RSAT [PowerShell][edit]

Get-WindowsCapability -Name RSAT* -Online | Add-WindowsCapability -Online

Install Vim (System Wide) [PowerShell][edit]

mkdir vim-install; cd vim-install; $ProgressPreference = 'SilentlyContinue'; Invoke-Webrequest -UseBasicParsing https://github.com/vim/vim-win32-installer/releases/download/v9.1.0/gvim_9.1.0_x86_signed.zip -o gvim.zip; Expand-Archive -Path gvim.zip -DestinationPath .; cp .\vim\vim91\vim.exe C:\windows\system32\vim.exe

Install Vim (User Only) [PowerShell][edit]

mkdir vim-install; cd vim-install; $ProgressPreference = 'SilentlyContinue'; Invoke-Webrequest -UseBasicParsing https://github.com/vim/vim-win32-installer/releases/download/v9.1.0/gvim_9.1.0_x86_signed.zip -o gvim.zip; Expand-Archive -Path gvim.zip -DestinationPath .; cp .\vim\vim91\vim.exe $env:LOCALAPPDATA\Microsoft\WindowsApps\vim.exe

Install Git [PowerShell][edit]

winget install --id Git.Git -e --source winget --scope user

Services[edit]

List Services [PowerShell][edit]

Get-Service

Set Auto Start [PowerShell][edit]

Set-Service -Name {servicename} -StartupType Automatic

Manage Service [PowerShell][edit]

Start-Service {servicename}
Stop-Service {servicename}
Restart-Service {servicename}

Networking (Advanced)[edit]

Remove Default Gateway [PowerShell][edit]

Remove-NetRoute -InterfaceAlias "{get this name from Get-NetAdapter}" -DestinationPrefix 0.0.0.0/0

Set IP Address [PowerShell][edit]

Get-NetAdapter -Name '{get this name from Get-NetAdapter}' | New-NetIPAddress -IPAddress {newIP} -PrefixLength {cidr}

Allow Ping [CMD][edit]

netsh advfirewall firewall add rule name="ICMP Allow incoming V4 echo request" protocol=icmpv4:8,any dir=in action=allow

Show WiFi Passwords [CMD][edit]

for /f "skip=9 tokens=1,2 delims=:" %i in ('netsh wlan show profiles') do @if "%j" NEQ "" (echo SSID: %j & netsh wlan show profiles %j key=clear | findstr "Key Content")

Disable WiFi Scanning [CMD][edit]

netsh wlan set autoconfig enabled=no interface="Wi-Fi"

Enable WiFi Scanning [CMD][edit]

netsh wlan set autoconfig enabled=yes interface="Wi-Fi"

Storage & Files[edit]

Resize VHD [PowerShell][edit]

resize-vhd -path "f:\Shares\profiledisks" -Sizebytes 30GB

Robocopy Migration [CMD][edit]

robocopy "C:\users\awesome.guy" "D:\users\awesome.guy" /E /COPYALL /zb /r:10 /w:10 /tee /unilog+:"D:\robocopylog.txt"

DNS & Group Policy[edit]

Add DNS Suffix [PowerShell][edit]

Set-DnsClientGlobalSetting -SuffixSearchList @("corp.mariocorp.com")

Force GP Update [CMD][edit]

gpupdate.exe /force

Misc[edit]

Firefox Profile Manager [CMD][edit]

"C:\Program Files\Mozilla Firefox\firefox.exe" --ProfileManager

Ping with Timestamp [PowerShell][edit]

ping google.com -t | % { "$(Get-Date -Format 'yyyy-MM-dd HH:mm:ss') $_" }

Open a Command Prompt as SYSTEM[edit]

PSExec Method (Requires installing PSExec) [PowerShell][edit]

The oneliner below installs psexec for you and uses it to open the SYSTEM cmd. Needs an elevated powershell prompt.

Invoke-WebRequest -Uri "https://download.sysinternals.com/files/PSTools.zip" -OutFile "$env:TEMP\PSTools.zip"; Expand-Archive "$env:TEMP\PSTools.zip" -DestinationPath "$env:TEMP\PSTools" -Force; & "$env:TEMP\PSTools\PsExec64.exe" -accepteula -i -s -d cmd.exe /k "title NT AUTHORITY\SYSTEM - whoami && whoami"

If it has been run before, you can open the prompt with just:

;& "$env:TEMP\PSTools\PsExec64.exe" -i -s -d cmd.exe

UAC Method (May trip antivirus but does not require external tools)[edit]

This method uses the UAC secure desktop (via On-Screen Keyboard trick) to launch cmd.exe as NT AUTHORITY\SYSTEM without third-party tools.

Setup (run once as Administrator)[edit]

reg add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\osk.exe" /v Debugger /t REG_SZ /d "cmd.exe" /f

Trigger SYSTEM cmd[edit]

Open any program as Administrator so the UAC prompt appears.
While the UAC dialog is visible (dark background), press Win + U to open Ease of Access Center.
Click On-Screen Keyboard.
A Command Prompt running as SYSTEM should appear on the secure desktop.

Cleanup (run as Administrator when done)[edit]

reg delete "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\osk.exe" /f

Note: This works because the secure desktop runs with SYSTEM privileges. The cmd window will appear only while the UAC prompt is active.

@@ Line 43: / Line 43: @@
   ipconfig /flushdns6
-= Windows Repair (USE THIS IF WINDOWS IS ACTING UP HELLA WEIRD) =
+= Windows Repair (USE THIS IF WINDOWS IS ACTING UP) =
-== DISM RestoreHealth [CMD/PowerShell] ==
+== DISM RestoreHealth [CMD] ==
   DISM /Online /Cleanup-Image /RestoreHealth
-== SFC Scan (run after DISM) [CMD/PowerShell] ==
+== SFC Scan (run after DISM) [CMD] ==
   SFC /scannow
-== SFC Scan (after reboot) [CMD/PowerShell] ==
+== SFC Scan (after reboot) [CMD] ==
   SFC /scannow
-= Reset Internet Settings (G.O.A.T.) [CMD] =
+= Reset Internet Settings (Fixes a surprisingly large amount of problems with ms office) [CMD] =
   RunDll32.exe InetCpl.cpl,ResetIEtoDefaults
 = Network Drive Management =
-== List Mapped Drives [CMD/PowerShell] ==
+== List Mapped Drives [CMD] ==
   net use
-== Remove Mapping [CMD/PowerShell] ==
+== Remove Mapping [CMD] ==
   net use <drive letter>: /delete
-== Recreate Mapping [CMD/PowerShell] ==
+== Recreate Mapping [CMD] ==
   net use <drive letter>: \\server\share /persistent:yes
-== Delete All Mappings [CMD/PowerShell] ==
+== Delete All Mappings [CMD] ==
   net use * /delete
-== Persistently Map Drive [CMD/PowerShell] ==
+== Persistently Map Drive [CMD] ==
   net use /persistent:yes h: \\VBoxSvr\Win11\Documents
@@ Line 94: / Line 94: @@
 = Power & System =
-== Disable Hibernation [CMD/PowerShell] ==
+== Disable Hibernation [CMD] ==
   powercfg.exe /Hibernate off
-== Compact OS [CMD/PowerShell] ==
+== Compact OS [CMD] ==
   Compact.exe /CompactOS:always
@@ Line 113: / Line 113: @@
 = Windows Fixes =
-== Fix Windows 11 Right Click [CMD/PowerShell] ==
+== Fix Windows 11 Right Click [CMD] ==
   reg.exe add "HKCU\Software\Classes\CLSID\{86ca1aa0-34aa-4e8b-a509-50c905bae2a2}\InprocServer32" /f /ve
-== Fix Edge Alt Key [CMD/PowerShell] ==
+== Make Edge Alt Key not focus settings  [CMD] ==
   reg add HKLM\SOFTWARE\Policies\Microsoft\Edge /v ConfigureKeyboardShortcuts /d {"disabled":["focus_settings_and_more"]}
-== Disable Widgets [CMD/PowerShell] ==
+== Disable Widgets [CMD] ==
   reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced /v TaskbarDa /t REG_DWORD /d 0
-== Fix Windows Update Missing [CMD/PowerShell] ==
+== Fix Windows Update Missing [CMD] ==
   reg delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer" /v SettingsPageVisibility /f
+== Disable Telemetry (May auto-undo itself on non-enterprise windows versions) [CMD] ==
+ reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\DataCollection /v AllowTelemetry /t REG_DWORD /d 0 /f
 = Active Directory =
@@ Line 142: / Line 145: @@
 == Install OpenSSH [PowerShell] ==
-  Add-WindowsCapability -Online -Name OpenSSH.Server[[Special:Contributions/170.55.73.212|170.55.73.212]] 00:01, 24 March 2026 (UTC)0.0.1.0
+  Add-WindowsCapability -Online -Name OpenSSH.Server
+ Start-Service sshd
+ Set-Service -Name sshd -StartupType 'Automatic'
 == Install RSAT [PowerShell] ==
@@ Line 177: / Line 182: @@
   Get-NetAdapter -Name '{get this name from Get-NetAdapter}' | New-NetIPAddress -IPAddress {newIP} -PrefixLength {cidr}
-== Allow Ping [CMD/PowerShell] ==
+== Allow Ping [CMD] ==
   netsh advfirewall firewall add rule name="ICMP Allow incoming V4 echo request" protocol=icmpv4:8,any dir=in action=allow
@@ Line 183: / Line 188: @@
   for /f "skip=9 tokens=1,2 delims=:" %i in ('netsh wlan show profiles') do @if "%j" NEQ "" (echo SSID: %j & netsh wlan show profiles %j key=clear | findstr "Key Content")
-== Disable WiFi Scanning [CMD/PowerShell] ==
+== Disable WiFi Scanning [CMD] ==
   netsh wlan set autoconfig enabled=no interface="Wi-Fi"
-== Enable WiFi Scanning [CMD/PowerShell] ==
+== Enable WiFi Scanning [CMD] ==
   netsh wlan set autoconfig enabled=yes interface="Wi-Fi"
@@ Line 194: / Line 199: @@
   resize-vhd -path "f:\Shares\profiledisks" -Sizebytes 30GB
-== Robocopy Migration [CMD/PowerShell] ==
+== Robocopy Migration [CMD] ==
   robocopy "C:\users\awesome.guy" "D:\users\awesome.guy" /E /COPYALL /zb /r:10 /w:10 /tee /unilog+:"D:\robocopylog.txt"
@@ Line 202: / Line 207: @@
   Set-DnsClientGlobalSetting -SuffixSearchList @("corp.mariocorp.com")
-== Force GP Update [CMD/PowerShell] ==
+== Force GP Update [CMD] ==
   gpupdate.exe /force
 = Misc =
-== Firefox Profile Manager [CMD/PowerShell] ==
+== Firefox Profile Manager [CMD] ==
   "C:\Program Files\Mozilla Firefox\firefox.exe" --ProfileManager
 == Ping with Timestamp [PowerShell] ==
   ping google.com -t | % { "$(Get-Date -Format 'yyyy-MM-dd HH:mm:ss') $_" }
+== Open a Command Prompt as SYSTEM ==
+=== PSExec Method (Requires installing PSExec) [PowerShell] ===
+The oneliner below installs psexec for you and uses it to open the SYSTEM cmd. Needs an elevated powershell prompt.
+ Invoke-WebRequest -Uri "https://download.sysinternals.com/files/PSTools.zip" -OutFile "$env:TEMP\PSTools.zip"; Expand-Archive "$env:TEMP\PSTools.zip" -DestinationPath "$env:TEMP\PSTools" -Force; & "$env:TEMP\PSTools\PsExec64.exe" -accepteula -i -s -d cmd.exe /k "title NT AUTHORITY\SYSTEM - whoami && whoami"
+If it has been run before, you can open the prompt with just:
+ ;& "$env:TEMP\PSTools\PsExec64.exe" -i -s -d cmd.exe
+=== UAC Method (May trip antivirus but does not require external tools) ===
+This method uses the UAC secure desktop (via On-Screen Keyboard trick) to launch cmd.exe as '''NT AUTHORITY\SYSTEM''' without third-party tools.
+==== Setup (run once as Administrator) ====
+<pre>
+reg add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\osk.exe" /v Debugger /t REG_SZ /d "cmd.exe" /f
+</pre>
+==== Trigger SYSTEM cmd ====
+# Open any program '''as Administrator''' so the UAC prompt appears.
+# While the UAC dialog is visible (dark background), press '''Win + U''' to open Ease of Access Center.
+# Click '''On-Screen Keyboard'''.
+# A Command Prompt running as '''SYSTEM''' should appear on the secure desktop.
+==== Cleanup (run as Administrator when done) ====
+<pre>
+reg delete "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\osk.exe" /f
+</pre>
+'''Note:''' This works because the secure desktop runs with SYSTEM privileges. The cmd window will appear only while the UAC prompt is active.

Commands: Difference between revisions