Get easy to remote any target Windows computer using PsExec and CMD
1. Download psexec at:
https://docs.microsoft.com/en-us/sysi...
2. Ensure that your account has granted admin rights in target computer
Ensure that you know target computer hostname or IP address
And it can resolve DNS/IP properly from your source computer
No firewall are being blocked if any
telnet 172.25.0.78 445
My case:
Source computer: DK - IP: 172.25.0.157
Target computer: Lap536 - IP: 172.25.0.78
3. Enable admin$ sharing as below
To enable administrative shares you have to make a registry change.
Click on Start Menu and in the search box type ‘regedit’ and press ENTER
Navigate to following key : HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System
and create or modify a REG_DWORD value LocalAccountTokenFilterPolicy and set its value to 1
4. Connect to target computer by below command:
PsExec.exe -u lap536\administrator \\172.25.0.78 cmd.exe
netstat -ano | find "445"