< All Topics
Print

Commands For Administrators

PostedSeptember 25, 2025
UpdatedSeptember 25, 2025
Byadmin

📂 File & Directory Management (20)

  1. dir – List files
  2. cd path – Change directory
  3. tree – Display directory structure
  4. copy file1 file2 – Copy file
  5. xcopy source destination /E /I – Copy folder with subfolders
  6. robocopy source destination /MIR – Mirror directories
  7. move file dest – Move file
  8. del filename – Delete file
  9. rmdir /S /Q folder – Remove folder
  10. attrib +R file – Add read-only attribute
  11. attrib -R file – Remove read-only attribute
  12. compact /C file – Compress file/folder (NTFS)
  13. fsutil file createnew file.txt 1000 – Create test file
  14. more file.txt – Display file contents
  15. type file.txt – Print file contents
  16. find "text" file.txt – Search text in file
  17. where app.exe – Find path of program
  18. cls – Clear screen
  19. explorer . – Open current folder in Explorer
  20. start filename.txt – Open file with default app

👥 User & Group Management (20)

  1. net user – List users
  2. net user username – Show details
  3. net user username * – Reset password
  4. net user username /active:yes – Enable account
  5. net user username /active:no – Disable account
  6. net localgroup – List groups
  7. net localgroup administrators – Show admins
  8. net localgroup administrators user /add – Add admin
  9. net localgroup administrators user /delete – Remove admin
  10. lusrmgr.msc – Local Users and Groups GUI
  11. whoami – Current user
  12. whoami /groups – Show group memberships
  13. whoami /priv – Show privileges
  14. get-localuser (PS) – List local users
  15. get-localgroup (PS) – List groups
  16. get-localgroupmember administrators (PS) – Show admin members
  17. Add-LocalGroupMember -Group "Administrators" -Member user
  18. Remove-LocalGroupMember -Group "Administrators" -Member user
  19. net accounts – Show password policy
  20. net accounts /minpwlen:10 – Set min password length

💻 System Information (20)

  1. systeminfo – System details
  2. hostname – Show computer name
  3. ver – Windows version
  4. winver – Build/version info
  5. echo %username% – Show user
  6. echo %computername% – Show PC name
  7. set – Show environment variables
  8. wmic os get caption,version,osarchitecture – OS info
  9. wmic cpu get name,numberofcores – CPU info
  10. wmic memorychip get capacity – RAM info
  11. wmic bios get serialnumber – BIOS serial
  12. driverquery – List drivers
  13. tasklist – List processes
  14. taskkill /PID 1234 /F – Kill process
  15. get-process (PS) – Show processes
  16. stop-process -id 1234 -force (PS) – Kill process
  17. get-service (PS) – Show services
  18. restart-service spooler – Restart print service
  19. get-hotfix (PS) – Installed updates
  20. msinfo32 – System information tool

🔒 Security & Policy (20)

  1. gpresult /R – Show applied GPOs
  2. gpupdate /force – Refresh Group Policy
  3. secedit /analyze – Analyze security
  4. cipher /E file – Encrypt file
  5. cipher /D file – Decrypt file
  6. cipher /W:C:\ – Wipe free space
  7. auditpol /get /category:* – Show audit settings
  8. net accounts /maxpwage:30 – Set max password age
  9. net accounts /lockoutthreshold:3 – Lockout after 3 tries
  10. net accounts /uniquepw:5 – Require unique passwords
  11. whoami /priv – Show privileges
  12. icacls file.txt – Show permissions
  13. icacls file.txt /grant user:F – Grant full access
  14. icacls file.txt /remove user – Remove access
  15. secpol.msc – Local Security Policy GUI
  16. fido2 (PS) – Manage security keys (if available)
  17. certmgr.msc – Certificate Manager
  18. certutil -store my – List certs
  19. cipher /K – Generate EFS key
  20. runas /user:domain\user cmd – Run as another user

📡 Networking (30)

  1. ipconfig – IP info
  2. ipconfig /all – Detailed IP config
  3. ipconfig /release – Release IP
  4. ipconfig /renew – Renew IP
  5. ping host – Test connectivity
  6. tracert host – Trace route
  7. pathping host – Trace + packet loss
  8. nslookup domain.com – DNS lookup
  9. netstat -ano – Show connections
  10. netstat -rn – Show routes
  11. arp -a – ARP table
  12. route print – Routing table
  13. route add 10.0.0.0 mask 255.255.255.0 192.168.1.1 – Add route
  14. telnet host port – Test TCP port
  15. curl -I https://example.com – HTTP headers
  16. wget https://example.com – Download file (PS)
  17. Test-NetConnection host -Port 443 (PS) – Test port
  18. Resolve-DnsName domain.com (PS) – DNS lookup
  19. netsh interface ip show config – Show NIC config
  20. netsh advfirewall show allprofiles – Show firewall profiles
  21. netsh advfirewall reset – Reset firewall
  22. net use – Show mapped drives
  23. net use Z: \\server\share – Map drive
  24. net use Z: /delete – Unmap drive
  25. mstsc – Remote Desktop
  26. rasdial – Manage VPN connections
  27. Get-NetIPAddress (PS) – Show IP addresses
  28. Get-NetRoute (PS) – Show routes
  29. Get-NetTCPConnection (PS) – Active connections
  30. Invoke-WebRequest https://site.com (PS) – Fetch web data

🛠 Disk, Storage, DSM, and Backup (30)

  1. diskpart – Disk management
  2. list disk – Show disks
  3. list volume – Show volumes
  4. select disk 0 – Select disk
  5. clean – Wipe disk
  6. create partition primary – New partition
  7. format fs=ntfs quick – Format partition
  8. assign letter=E – Assign drive letter
  9. mountvol – Show mounted volumes
  10. chkdsk C: /F /R – Scan and repair disk
  11. defrag C: – Defragment disk
  12. vssadmin list shadows – Show shadow copies
  13. vssadmin delete shadows /all – Delete shadow copies
  14. fsutil fsinfo drives – List drives
  15. fsutil dirty query C: – Check dirty bit
  16. fsutil behavior query disabledeletenotify – TRIM status
  17. wbadmin start backup -backupTarget:D: -include:C: – Start backup
  18. wbadmin get versions – List backups
  19. wbadmin start recovery – Start recovery
  20. DISM /Online /Cleanup-Image /CheckHealth – Check image health
  21. DISM /Online /Cleanup-Image /ScanHealth – Scan image
  22. DISM /Online /Cleanup-Image /RestoreHealth – Repair image
  23. DISM /Online /Cleanup-Image /StartComponentCleanup – Clean components
  24. sfc /scannow – Repair system files
  25. sfc /verifyonly – Verify system files
  26. CHKNTFS C: – Check autochk status
  27. CHKNTFS /X C: – Exclude drive from autochk
  28. Get-Volume (PS) – List volumes
  29. Get-Partition (PS) – List partitions
  30. Resize-Partition (PS) – Resize partition

⚡ Performance & Monitoring (30)

  1. taskmgr – Task Manager
  2. perfmon – Performance Monitor
  3. resmon – Resource Monitor
  4. eventvwr – Event Viewer
  5. logman create counter PerfLog -c "\Processor(_Total)\% Processor Time" -f csv -o C:\Perf.csv – Perf log
  6. wevtutil qe System /c:10 /f:text – Show last 10 system logs
  7. Get-EventLog -LogName system -Newest 10 (PS) – Event logs
  8. Get-WinEvent -LogName Application -MaxEvents 20 (PS) – New event log tool
  9. Get-Counter "\Processor(_Total)\% Processor Time" (PS) – CPU usage
  10. Get-Counter "\Memory\Available MBytes" (PS) – Memory usage
  11. Get-Counter "\LogicalDisk(C:)\% Free Space" (PS) – Disk usage
  12. Get-Process | Sort-Object CPU -Descending | Select -First 5 – Top processes
  13. Get-Service | Where-Object {$_.Status -eq "Running"} – Running services
  14. query user – Show logged-in users
  15. qwinsta – Remote desktop sessions
  16. rwinsta <ID> – Kill RDP session
  17. tasklist /V – Verbose processes
  18. typeperf "\Processor(_Total)\% Processor Time" – Live CPU stats
  19. typeperf "\Memory\Available MBytes" – Memory stats
  20. Get-WmiObject win32_operatingsystem – System stats
  21. Get-WmiObject win32_logicaldisk – Disk stats
  22. Get-WmiObject win32_processor – CPU info
  23. powercfg /batteryreport – Battery health
  24. powercfg /energy – Energy diagnostics
  25. powercfg /sleepstudy – Sleep diagnostics
  26. psinfo (Sysinternals) – Quick system summary
  27. pslist (Sysinternals) – Process list
  28. psexec – Remote execution
  29. psshutdown – Remote shutdown
  30. bginfo – Display system info on desktop

🔧 Troubleshooting & Admin Tools (30)

  1. shutdown /i – Remote shutdown GUI
  2. shutdown /r /t 0 – Restart now
  3. shutdown /s /f /t 0 – Shutdown now
  4. taskkill /IM notepad.exe /F – Kill app by name
  5. sc query – Query services
  6. sc stop spooler – Stop service
  7. sc start spooler – Start service
  8. net start – Show running services
  9. net stop service – Stop service
  10. net start service – Start service
  11. services.msc – Services GUI
  12. compmgmt.msc – Computer Management
  13. devmgmt.msc – Device Manager
  14. diskmgmt.msc – Disk Management
  15. dcomcnfg – Component Services
  16. msconfig – System Configuration
  17. regedit – Registry Editor
  18. reg query HKLM\Software\Microsoft\Windows\CurrentVersion\Run – Startup apps
  19. reg add HKCU\Software\Test /v MyValue /t REG_SZ /d Data – Add reg value
  20. reg delete HKCU\Software\Test /v MyValue /f – Delete reg value
  21. cleanmgr – Disk Cleanup
  22. dxdiag – DirectX diagnostic
  23. mrt – Malicious Software Removal Tool
  24. taskschd.msc – Task Scheduler
  25. schtasks /query – Show scheduled tasks
  26. schtasks /create /sc daily /tn MyTask /tr "notepad.exe" – Create task
  27. sysdm.cpl – System Properties
  28. control – Control Panel
  29. appwiz.cpl – Programs & Features
  30. optionalfeatures – Windows Features