Remote shell access to Windows machine on Domain
This seems to be just like connecting via SSH to a Linux machine, but with Windows. I’ve only tested with Windows 10, but it works great.
- Download PSEX HERE.
- Extract ZIP wherever (I like to use 7zip).
- CD to that location via CMD as domain admin (this is assuming domain environment, run CMD as administrator by right clicking, then run as administrator)
- Run the following
.PsExec.exe \PCnameORip cmd.exe
- You are now in a remote shell
You can also use winrs as well
- Run CMD as admin
- winrs -r:PC_Name cmd
- If you’d like to use powershell you just need to type “powershell.exe” in the shell