Local System and interactive command line

Tools such as SCCM are normally running installations in the LocalSystem privilege set. In some cases that is different from a Administrator account. Normally it is not possible to logon with the LocalSystem account because Microsoft is not supporting that. In this little blogpost you find the techniques to become System on your Windows 7 / Windows 8 box. You can download psexec from http://live.sysinternals.com and run with the following options:

psexec -i -s cmd.exe

You get a command prompt open. In that one type:

whoami

To check if you are the nt authority\system (which is the LocalSystem account). During my jobs I found that the psexec is not always the most reliable option to use. The following option is better in representing a true System account and working as a service (Like SCCM does)

sc create cmd binpath= "cmd /K start" type= own type= interact

When you are running Windows 8, you have to check the following registry key:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Windows\NoInteractiveServices

This must have value 0, else you won’t get the Interactive Services window. After that type this code:

sc start cmd

Click in the screen on View the message to start Interactive Services.

Now you are in and you can do the job or throubleshoot your problem.