This method works on Windows 11,10, 8.1 & 7 as well.
All programs for this guide are free.
Download links
PsTools
PsTools - Windows Sysinternals
FePsTools
Front-end for PsTools | DaviTools
Nircmd (At the bottom of the page. Not the 64 bit one.)
NirCmd - Windows command line tool
Winrar
WinRAR Download Latest Version
--------------------------------
Nircmd: Used to run system commands.
Winrar: Used to extract the downloaded compressed files if another one is not available already.
PsTools: Are Microsoft tools to remote execute commands on other computers.
FePsTools: Is a third party tool to create the commands and shortcuts for PsTools.
--------------------------------
Extract Nircmd files and add them to C:\windows\system32 folder. (If it gives an error then extract the contents to a folder that you create on the desktop then copy the contents to that location).
FePsTools program is not needed for remote execution to work but I found that it increases the chance of success because sometimes some commands don’t work as well with just PsTools on different Operating Systems.
--------------------------------
If you get access denied then you will need to enable the local administrator account on the target computer and use the credentials for it to work. You will still use your normal account but now you will have one more account on the login screen.
To enable the local administrator then right click on cmd and run it as administrator then run the below command:
net user administrator /active:yes
Then go to users in control panel and manage the account to create the password (Blank passwords don’t work). No need to log into the administrator account to continue. (If you do get any other problems then logon to the administrator account then back into your normal account).
Extract the FePsTools into any permanent location and extract the PsTools and move the Psexec.exe file into the FePsTools directory. FePsTools does work with other tools from PsTools including remote locking the PC, but it did not work during testing so we will only be using the Psexec.exe tool.
To create a batch file just create a text file and change the extension from .txt to .bat. To edit a batch file, just click on it with the mouse right button and select edit.
The FePsTools will allow you to create shortcuts for the commands.
The below image shows the fields that need to be filled in.
For one Client PC. Add the computer name or IP address along with the Administrator username and password. It is recommended to use computer name instead of IP address because sometimes the IP address can change. (IP addresses can be reserved from the main router for each PC so that it does not change).
Fill in the commands as showing in the below image.
The Command in the below image will mute the remote PC.
To create a shortcut for the command then use the button shown in the below image.
To test the command from the FePsTool then use the button shown in the below image.
The button with the X on it is to stop the command from running.
Creating a shortcut will only work to Run one command for one computer.
To create it for multiple computers then Create each shortcut and save it in a permanent directory. Then use a batch file to run all of them at once.
The below is an example of a batch file. It will just include the command to run the shortcut from its location (This is for three commands). File and folder names do not matter so that the commands work. Just make sure that the location of each one is correct when typing it in. Use the quotation marks as showing in the below example.
The timeout command is not required. Use it if it seems that some commands are not working. The number is time in seconds.
Run Batch file as Administrator
@echo Off
Start "" "D:\any\one.lnk"
Timeout /T 1
Start "" "D:\any\Two.lnk"
Timeout /T 1
Start "" "D:\any\three.lnk"
Other requirements
File and printer sharing needs to be allowed through the firewall as showing in the below image.
It also needs to be enabled on LAN adapter. (It is on by default so check it if it has been disabled by you before)
EXTRA TIPS
Keep the created files and folders as is so that all works well. If you move or rename something then it might need to be recreated.
If you get the error that Admin$ share is not working then open the computer management and check that they are enabled.
If you get on IPC$ then there is an issue with it like is showing below.
This is an example of the standard share being enabled. You might have different partitions showing in your log.
Some programs like AVG Tuneup give the option to disable option to disable it. You can re-enable it from there or by using one of the below methods.
Microsoft solution.
Or download Winaero Tweaker from the below link and search for Administrative Shares (also called Network /Administrative Shares) and enable them and then restart the PC.
winaerotweaker.com
If you have issue while pinging by hostname and get response from IPV6 instead of IPV4 then use the below instructions to get it fixed and back to normal.
Open a cmd (Command Prompt) as an administrator and run the two following orders:
netsh interface ipv6 set prefix ::/96 60 3
then
netsh interface ipv6 set prefix ::ffff:0:0/96 55 4
-------------------------
To avoid having to type the password for each remote PC then it is recommended to configure the same password for the Administrator user on the server (main) and all the client computers on the network that will be remote controlled.
The next step would is to open the created shortcut of the FePsTools and to place the entire entry of the target in quotes "" from before the 1st letter all the way up to the last character. Then go back to to the start and enter the following: C:\Windows\System32\runas.exe /savecred /user:administrator
Then a single space after it.
This will inform the system to run a tool that can run any program as a different local user. In this case as the administrator. This is different than the right click run as administrator because it will then open a console the 1st time you run it that will require the Administrator password.
All programs for this guide are free.
Download links
PsTools
PsTools - Windows Sysinternals
FePsTools
Front-end for PsTools | DaviTools
Nircmd (At the bottom of the page. Not the 64 bit one.)
NirCmd - Windows command line tool
Winrar
WinRAR Download Latest Version
--------------------------------
Nircmd: Used to run system commands.
Winrar: Used to extract the downloaded compressed files if another one is not available already.
PsTools: Are Microsoft tools to remote execute commands on other computers.
FePsTools: Is a third party tool to create the commands and shortcuts for PsTools.
--------------------------------
Extract Nircmd files and add them to C:\windows\system32 folder. (If it gives an error then extract the contents to a folder that you create on the desktop then copy the contents to that location).
FePsTools program is not needed for remote execution to work but I found that it increases the chance of success because sometimes some commands don’t work as well with just PsTools on different Operating Systems.
--------------------------------
If you get access denied then you will need to enable the local administrator account on the target computer and use the credentials for it to work. You will still use your normal account but now you will have one more account on the login screen.
To enable the local administrator then right click on cmd and run it as administrator then run the below command:
net user administrator /active:yes
Then go to users in control panel and manage the account to create the password (Blank passwords don’t work). No need to log into the administrator account to continue. (If you do get any other problems then logon to the administrator account then back into your normal account).
Extract the FePsTools into any permanent location and extract the PsTools and move the Psexec.exe file into the FePsTools directory. FePsTools does work with other tools from PsTools including remote locking the PC, but it did not work during testing so we will only be using the Psexec.exe tool.
To create a batch file just create a text file and change the extension from .txt to .bat. To edit a batch file, just click on it with the mouse right button and select edit.
The FePsTools will allow you to create shortcuts for the commands.
The below image shows the fields that need to be filled in.
For one Client PC. Add the computer name or IP address along with the Administrator username and password. It is recommended to use computer name instead of IP address because sometimes the IP address can change. (IP addresses can be reserved from the main router for each PC so that it does not change).
Fill in the commands as showing in the below image.
The Command in the below image will mute the remote PC.
To create a shortcut for the command then use the button shown in the below image.
To test the command from the FePsTool then use the button shown in the below image.
The button with the X on it is to stop the command from running.
Creating a shortcut will only work to Run one command for one computer.
To create it for multiple computers then Create each shortcut and save it in a permanent directory. Then use a batch file to run all of them at once.
The below is an example of a batch file. It will just include the command to run the shortcut from its location (This is for three commands). File and folder names do not matter so that the commands work. Just make sure that the location of each one is correct when typing it in. Use the quotation marks as showing in the below example.
The timeout command is not required. Use it if it seems that some commands are not working. The number is time in seconds.
Run Batch file as Administrator
@echo Off
Start "" "D:\any\one.lnk"
Timeout /T 1
Start "" "D:\any\Two.lnk"
Timeout /T 1
Start "" "D:\any\three.lnk"
Other requirements
File and printer sharing needs to be allowed through the firewall as showing in the below image.
It also needs to be enabled on LAN adapter. (It is on by default so check it if it has been disabled by you before)
EXTRA TIPS
Keep the created files and folders as is so that all works well. If you move or rename something then it might need to be recreated.
If you get the error that Admin$ share is not working then open the computer management and check that they are enabled.
If you get on IPC$ then there is an issue with it like is showing below.
This is an example of the standard share being enabled. You might have different partitions showing in your log.
Some programs like AVG Tuneup give the option to disable option to disable it. You can re-enable it from there or by using one of the below methods.
Microsoft solution.
administrative shares are missing - Windows Server
Provides an explanation of various symptoms that can occur when the IPC$, ADMIN$, or C$ shares are missing on your computer, and provides steps to resolve the issue.
docs.microsoft.com
Or download Winaero Tweaker from the below link and search for Administrative Shares (also called Network /Administrative Shares) and enable them and then restart the PC.
Winaero Tweaker
The ultimate all-in-one tweaker for Windows 11, Windows 10, Windows 8, and Windows 7.
winaerotweaker.com
If you have issue while pinging by hostname and get response from IPV6 instead of IPV4 then use the below instructions to get it fixed and back to normal.
Open a cmd (Command Prompt) as an administrator and run the two following orders:
netsh interface ipv6 set prefix ::/96 60 3
then
netsh interface ipv6 set prefix ::ffff:0:0/96 55 4
-------------------------
To avoid having to type the password for each remote PC then it is recommended to configure the same password for the Administrator user on the server (main) and all the client computers on the network that will be remote controlled.
The next step would is to open the created shortcut of the FePsTools and to place the entire entry of the target in quotes "" from before the 1st letter all the way up to the last character. Then go back to to the start and enter the following: C:\Windows\System32\runas.exe /savecred /user:administrator
Then a single space after it.
This will inform the system to run a tool that can run any program as a different local user. In this case as the administrator. This is different than the right click run as administrator because it will then open a console the 1st time you run it that will require the Administrator password.
Last edited:
