# "NT AUTHORITY\SYSTEM" Access This account can be used to get access to heavily restricted areas, like the windows user password database. **Note**: The system account still can't access files that are locked but should have no problems generating volume snapshots to open them readonly anyways or changing permissions of any file/directory. 1. Obtain the tool [PsExec from microsoft](https://docs.microsoft.com/en-us/sysinternals/downloads/psexec) 2. [Run](#run) cmd.exe as administrator (type "cmd" in the start menu search and right click) 3. Type `C:\Path\To\psexec.exe -i -d -s cmd.exe` (use `psexec64.exe` on 64 bit systems) 4. A command prompt pops up that runs with the internal system account. You can verify by typing `WhoAmI`. The Command prompt should reply with `NT AUTHORITY\SYSTEM`.