"Why to be administrator only, when you can be the system."

Created process behaves as service - runs in system
security context and can live until machine is rebooted
(between logons).


Get http://EliCZ.com/Export/ShowPriv.zip.

A) ERunAs CMD
B) ShowPriv > system.txt

In W2K+:

A) RunAs /U:Administrator CMD
B) ShowPriv > admin.txt

C) RunAs /U:Guest CMD
D) ShowPriv > guest.txt

and compare assigned (=granted) and enabled privileges.