| Task | Command |
|---|---|
| List all users | net user |
| View details of a specific user | net user [username] |
| Add a new user | net user [username] [password] /add |
| Delete a user | net user [username] /delete |
| Change a user’s password | net user [username] [newpassword] |
| Force password change at next login | net user [username] /logonpasswordchg:yes |
| Disable a user account | net user [username] /active:no |
| Enable a user account | net user [username] /active:yes |
| Task | Command |
|---|---|
| List all groups | net localgroup |
| View members of a group | net localgroup [groupname] |
| Add a user to a group | net localgroup [groupname] [username] /add |
| Remove a user from a group | net localgroup [groupname] [username] /delete |
| Create a new local group | net localgroup [groupname] /add |
| Delete a local group | net localgroup [groupname] /delete |
| Task | Command |
|---|---|
| View folder permissions | icacls [folder_path] |
| Grant full control to a user | icacls [folder_path] /grant [username]:F |
| Grant read-only permission | icacls [folder_path] /grant [username]:R |
| Remove user permissions | icacls [folder_path] /remove [username] |
| Replace permissions (inheritance) | icacls [folder_path] /reset |
| Save current permissions to a file | icacls [folder_path] /save [filename] |
| Restore permissions from file | icacls [folder_path] /restore [filename] |
| Task | Command |
|---|---|
| Who is logged in | query user or whoami |
| Check current user privileges | whoami /priv |
| Run as admin from CMD | runas /user:Administrator cmd |
| Lock the workstation | rundll32.exe user32.dll,LockWorkStation |