Back to List
You are viewing an unformatted version of this file.
# "NT AUTHORITY\SYSTEM" Access
This account can be used to get access to heavily restricted areas,
like the windows user password database.
**Note**: The system account still can't access files that are locked but should have no problems generating volume snapshots to open them readonly anyways or changing permissions of any file/directory.
1. Obtain the tool [PsExec from microsoft](https://docs.microsoft.com/en-us/sysinternals/downloads/psexec)
2. [Run](#run) cmd.exe as administrator (type "cmd" in the start menu search and right click)
3. Type `C:\Path\To\psexec.exe -i -d -s cmd.exe` (use `psexec64.exe` on 64 bit systems)
4. A command prompt pops up that runs with the internal system account. You can verify by typing `WhoAmI`.
The Command prompt should reply with `NT AUTHORITY\SYSTEM`.