激活远程桌面:
reg setval -k 'HKLM\System\CurrentControlSet\Control\Terminal Server' -v 'fDenyTSConnections' -d "1"
cmd.exe -a "/c sc config termservice start= disabled"cmd.exe -a "/c sc stop termservice"
cmd.exe -a "/c 'netsh firewall set service type = remotedesktop mode = enable'"
在系统system权限下运行进程:
psexec.exe -hsi regedit.exe
比如管理员账号无法查看注册表HKEY_LOCAL_MACHINE\SAM\SAM\Domains\Account,用上面的命令让regedit.exe在system权限运行,就可以查看了