How PSExec runs application as SYSTEM user?

StackOverflow https://stackoverflow.com/questions/7334542

Question

I wondered how psexec.exe by sysinternals executes a process as a SYSTEM user. I need to run a tool under a SYSTEM process, but I don't really know how to do that without registering it as a service.

Does anyone have an idea ?

p.s. I would really prefer to do it with WINAPI (C++). Thanks! :-)

Thanks!

Was it helpful?

Solution

psexec operates by creating a phantom, behind-the-scenes Windows service named "psexesvc" that is then removed after the operation completes.

Details are here: http://www.windowsecurity.com/articles/PsExec-Nasty-Things-It-Can-Do.html

Perhaps your tool could call psexec to run a process?

Licensed under: CC-BY-SA with attribution
Not affiliated with StackOverflow
scroll top