Add a User to the Local Administrators Group
privescwindowstool
Summary
Adds an existing local user to the built-in Administrators group to gain administrative privileges on a Windows host.
Walkthrough
Once you control an account (or have a command-execution primitive running as a privileged context), add that account to the local Administrators group to escalate.
Steps
- Run the command below, replacing
<USER>with the account you want to elevate. - Log off / log back on (or open a new session) so the new group membership takes effect.
``cmd net localgroup "administrators" <USER> /add ``
Commands
cmd
net localgroup "administrators" <USER> /add