« Command line windows » : différence entre les versions
De Banane Atomic
Aller à la navigationAller à la recherche
Ligne 14 : | Ligne 14 : | ||
|- | |- | ||
| Windows Features || optionalfeatures | | Windows Features || optionalfeatures | ||
|- | |||
| Registry Editor || regedit | |||
|} | |} | ||
Version du 16 février 2022 à 20:39
Applications
Name | Command |
---|---|
Services | services.msc |
HyperV manager | virtmgmt.msc |
Disk Management | diskmgmt.msc |
Device Manager | devmgmt.msc |
Windows Features | optionalfeatures |
Registry Editor | regedit |
Users and groups
# list local users net user # display account information (groups of which he is a member) net user [username] # create an account net user /add [username] * # it prompts the password # delete user net user [username] /delete # list local groups net localgroup # list the users of a group net localgroup [groupname] # add a user to a group net localgroup administrators [username] /add |
Access Control Lists
# save the DACLs of c:\folder\file.ext to c:\folder\acl.txt icacls c:\folder\file.ext /save c:\folder\acl.txt # restore the DACLs of c:\folder\file.ext from c:\folder\acl.txt icacls c:\folder\file.ext /restore c:\folder\acl.txt # grant to User1 the Delete and Write DAC permissions to c:\folder\file.ext icacls c:\folder\file.ext /grant User1:(d,wdac) |
Code | Description |
---|---|
F | Full access |
M | Modify access |
RX | Read and execute access |
R | Read-only access |
W | Write-only access |
Service Controller
# display the current permissions for MyService as an SDDL string sc sdshow MyService # set the permissions for MyService sc sdset MyService "D:(A;;...)(A;;RPWPCR;;;S-1-5-21-2133228432-2794320136-1823075350-1000)S:(...)" # get the SID of the current user whoami /user |
Code | Description |
---|---|
S: | System Access Control List (SACL) |
D: | Discretionary ACL (DACL) |
A | Allow |
D | Deny |
CC | SERVICE_QUERY_CONFIG : Query the SCM for the service configuration |
LC | SERVICE_QUERY_STATUS : Query the SCM the current status of the service |
SW | SERVICE_ENUMERATE_DEPENDENTS : List dependent services |
LO | SERVICE_INTERROGATE : Query the service its current status |
CR | SERVICE_USER_DEFINED_CONTROL |
RC | READ_CONTROL : Query the security descriptor of the service |
RP | SERVICE_START : Start the service |
WP | SERVICE_STOP |
DT | SERVICE_PAUSE_CONTINUE : Pause/Resume the service |
DC | SERVICE_CHANGE_CONFIG (Change service configuration) |
WD | WRITE_DAC : Change the permissions of the service |
WO | WRITE_OWNER : Change the ownership of the service |
SD | DELETE : The right to delete the service |
Code | Description |
---|---|
AU | Authenticated Users |
BA | Built-in administrators |
BU | Built-in users |
IU | Interactively logged-on user |
SU | Service logon user |
SY | Local System |
WD | Everyone |