← Back to search

Add a User to the Local Administrators Group

privescwindowstool

Summary

Adds an existing local user to the built-in Administrators group to gain administrative privileges on a Windows host.

Walkthrough

Once you control an account (or have a command-execution primitive running as a privileged context), add that account to the local Administrators group to escalate.

Steps

  1. Run the command below, replacing <USER> with the account you want to elevate.
  2. Log off / log back on (or open a new session) so the new group membership takes effect.

``cmd net localgroup "administrators" <USER> /add ``

Commands

cmd

net localgroup "administrators" <USER> /add