Run CMD, PowerShell or Regedit as SYSTEM in Windows 11

Published by Nyau Wai Hoe - Updated on

In Windows 11, there are times when you may need to run an application with SYSTEM-level permissions. This is particularly useful when you need to perform administrative tasks or modify system files that are locked by the SYSTEM or TrustedInstaller service. This article will guide you on how to run applications such as Command Prompt (CMD), PowerShell, Registry Editor (Regedit), or Windows Explorer (explorer.exe) as SYSTEM (LocalSystem) in Windows 11 using different methods.

Also see: How to Take Ownership of a File, Folder or Drive in Windows 11

How to Run CMD PowerShell Regedit as SYSTEM in Windows 11

How to run an application as SYSTEM in Windows 11

Running an application as SYSTEM in Windows 11 can be a powerful tool for advanced users, but it is important to understand the potential risks involved. With SYSTEM-level permissions, you can modify critical system files and settings, which can lead to system instability, security risks, or potential data loss if not done correctly.

Therefore, it is essential to exercise caution and follow best practices, such as creating a system restore point, backing up your data, using trusted tools, and understanding the changes you are making, to minimize the potential risks and ensure the safety and stability of your system.

Once you have a clear understanding of the potential risks and benefits of running applications as SYSTEM in Windows 11, proceed to one of the following methods to launch an application with SYSTEM or TrustedInstaller privileges.

Related issue: Windows Registry Key “Access is Denied” Error

Using Advanced Run

Advanced Run is a powerful utility that allows you to run applications with various user permissions, including SYSTEM. Here’s a detailed explanation of how to use Advanced Run:

  1. Download Advanced Run from the developer’s website and extract it to a folder on your computer.
  2. Open the extracted folder and launch the file called “AdvancedRun.exe“.Extract Advanced Run
  3. In the “Program” field, enter the full path to the application you want to run as SYSTEM, such as:
    • C:\Windows\System32\cmd.exe for Command Prompt
    • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe for PowerShell
    • C:\Windows\regedit.exe for Registry Editor
  4. In the “Start in” field, enter the folder path where the application is located. For example, enter C:\Windows\System32 for Command Prompt or PowerShell, and C:\Windows for Registry Editor.
  5. In the “Run as” field, choose “SYSTEM User” from the drop-down list.Run application as SYSTEM in Windows 11
  6. (Optional) Specify command-line arguments for the application in the “Arguments” field if needed.
  7. Click the “Run” button to launch the application with SYSTEM privileges.

To confirm whether CMD.exe has been executed as the SYSTEM user, you can open the Task Manager by pressing Ctrl + Shift + Esc and navigating to the Details tab. From there, locate the process you just launched as the SYSTEM user, such as cmd.exe, and verify that the “User name” column displays “SYSTEM” for that specific process.

Useful tip: How to Check Who is Logged in Remotely or Locally in Windows 11

How to Run CMD as SYSTEM user Windows 11

Using NirCMD

NirCMD is a lightweight, versatile command-line utility that provides various functions, including running applications with SYSTEM privileges. Here’s a detailed guide on using NirCMD:

  1. Download NirCMD from the NirSoft website and extract the contents to a folder on your computer.Extract NirCMD
  2. Open an elevated Command Prompt by right-clicking the Start button and selecting “Windows Terminal (Admin)”.
  3. Navigate to the folder containing NirCMD by typing cd <path-to-nircmd-folder> and pressing Enter. Replace <path-to-nircmd-folder> with the actual folder path where you extracted NirCMD.
  4. Run the application as SYSTEM by entering nircmd.exe elevatecmd runasSYSTEM <application-path>. Replace <application-path> with the full path to the application you want to run, such as:
    • C:\Windows\System32\cmd.exe for Command Prompt
    • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe for PowerShell
    • C:\Windows\regedit.exe for Registry Editor
  5. For example:
    cd C:\nircmd
    nircmd.exe elevatecmd runasSYSTEM C:\Windows\regedit.exe

    Run program as SYSTEM in Windows 11 using NirCMD

To confirm whether the program has been launched successfully as a SYSTEM user, open Task Manager and navigate to the “Details” tab. Look for the process associated with the program (e.g., regedit.exe) and check if it is being run by the SYSTEM user.

Run Registry Editor as SYSTEM user Windows 11

Using PsExec

PsExec is a command-line utility included in the Sysinternals Suite developed by Microsoft. It’s designed to execute processes on remote systems but can also be used to run applications as SYSTEM on the local machine. Here’s a detailed guide for using PsExec:

  1. Download the PsExec from the Microsoft website and extract the contents to a folder on your computer.
  2. Open an elevated Command Prompt by typing “cmd” in the Start Menu search box, right-clicking on “Command Prompt,” and selecting “Run as administrator.”
  3. Navigate to the folder containing PsExec by typing cd <path-to-psexec-folder> and pressing Enter. Replace <path-to-psexec-folder> with the actual folder path where you extracted the Sysinternals Suite.
  4. Run the application as SYSTEM by entering psexec.exe -i -s <application-path>. Replace <application-path> with the full path to the application you want to run, such as:
    • C:\Windows\System32\cmd.exe for Command Prompt
    • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe for PowerShell
    • C:\Windows\regedit.exe for Registry Editor

    For example:

    cd C:\PsTools
    psexec.exe -i -s C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

    Run CMD or PowerShell as SYSTEM with PsExec

  5. PsExec will launch the specified application with SYSTEM privileges.

How to run PowerShell as SYSTEM

    Running Explorer as SYSTEM in Windows 11

    Running Windows Explorer as SYSTEM provides access to system-protected files and folders that are typically restricted, even to administrators. This section will guide you through the process of correctly running Explorer as SYSTEM in Windows 11 using PsExec.

    Before starting, make sure you have PsTools downloaded and extracted, as described in the PsExec section above.

    1. Terminate the current Explorer instance: First, you need to terminate the existing instance of Windows Explorer running under your user account. To do this, search for “Command Prompt” in the Start menu, right-click Command Prompt from the search results and select “Run as administrator. In the elevated Command Prompt, navigate to the folder containing PsExec by typing cd <path-to-psexec-folder> and pressing Enter. Replace <path-to-psexec-folder> with the actual folder path where you extracted the PSTools. Then, enter the following command to terminate the current Explorer instance:
      pskill explorer.exe

      PsKill Explorer.exe
      After executing the command, you will notice that the taskbar and desktop icons disappear. This is because the Explorer process, which is responsible for managing these elements, has been terminated.

    2. Launch Explorer as SYSTEM: Now that the current Explorer instance has been terminated, you can launch a new instance with SYSTEM privileges using PsExec. Run the following command to start a new Explorer instance with SYSTEM privileges:
      psexec -i -s explorer

      How to run Explorer as SYSTEM in Windows 11
      After executing this command, Windows Explorer will restart, and your taskbar and desktop icons should reappear. The new Explorer instance will be running with SYSTEM-level permissions, allowing you to access system-protected files and folders.

    3. Verify Explorer is running as SYSTEM: To confirm that the new Explorer instance is running as SYSTEM, press Ctrl + Shift + Esc to open the Task Manager. In the “Processes” tab, find “Windows Explorer” in the list, right-click on it, and select “Properties”. Under the “Security” tab, you will see “NT AUTHORITY\SYSTEM” as the owner, confirming that Explorer is running with SYSTEM privileges.Run explorer.exe as SYSTEM
    4. Revert to the standard user account: Once you have completed your tasks using Explorer as SYSTEM, it is essential to revert to the standard user account to minimize potential risks associated with elevated privileges. To do this, follow the steps in point 1 to terminate the current SYSTEM-level Explorer instance. Then, press Ctrl + Shift + Esc to open the Task Manager, click “File” in the menu, and select “Run new task“. Enter “explorer.exe” in the “Open” field, and click “OK“. This will start a new Explorer instance under your user account with standard permissions.

    Running a scheduled task as SYSTEM

    Using the built-in Task Scheduler in Windows 11, you can create a scheduled task to run an application as SYSTEM. Here’s a more detailed explanation of the process:

    1. Open Task Scheduler by pressing the Win + R keys, typing taskschd.msc, and pressing Enter.
    2. In the Task Scheduler window, click “Create Task” in the right pane to open the “Create Task” window.
    3. Under the “General” tab, enter a name and description for the task.
    4. In the “Security options” section, click “Change User or Group” and enter “SYSTEM” in the text box. Click “Check Names” to verify the input and then click “OK”.Task Scheduler Run as System
    5. Check the “Run with highest privileges” option and choose “Windows 11” from the “Configure for” drop-down menu.Run app as LocalSystem Windows 11
    6. Go to the “Triggers” tab and click “New” to create a new trigger. Select “At task creation/modification” in the “Begin the task” drop-down menu and click “OK”.
    7. In the “Actions” tab, click “New” to create a new action. Choose “Start a program” from the “Action” drop-down menu. Enter the full path to the application you want to run as SYSTEM in the “Program/script” field, such as C:\Windows\System32\cmd.exe for Command Prompt. Click “OK”.Schedule a task to run CMD
    8. In the “Settings” tab, adjust any additional settings as needed, and click “OK” to create the task.
    9. Right-click the newly created task in the Task Scheduler Library and select “Run” to execute the application as SYSTEM.Running a scheduled task as SYSTEM

    Why is running applications as SYSTEM sometimes necessary?

    Running applications as SYSTEM in Windows 11 can provide several advantages, particularly when working with system-level configurations or troubleshooting tasks. Some of the benefits include:

    1. Access to system-protected resources: Running an application as SYSTEM allows you to access system files and folders, such as those protected by TrustedInstaller, which are usually inaccessible to standard users or even administrators. This can be helpful when you need to modify system files or registry settings for advanced configurations or troubleshooting purposes.
    2. Elevated permissions: Running applications as SYSTEM grants you the highest level of permissions available in Windows 11. This enables you to perform tasks that are typically restricted to the LocalSystem account, such as starting or stopping critical services, accessing security-sensitive registry keys, or modifying system configurations.
    3. Execute System-level tasks: Some system-level tasks, such as software installations or updates, may require running applications as SYSTEM to ensure that they are executed with the necessary privileges.

    What are the risks of running programs as SYSTEM or TrustedInstaller?

    While running applications as SYSTEM can provide numerous benefits, it also carries some potential risks that you should be aware of:

    1. System stability: When running applications with SYSTEM-level permissions, you have the ability to modify critical system files and settings. This can lead to system instability or crashes if not done carefully. Always make sure to have a backup of your system or create a system restore point before making any changes.
    2. Security risks: Running applications with elevated permissions can expose your system to potential security threats. Malware or other malicious software may exploit the elevated permissions to compromise your system. Be cautious when running applications from unknown sources or when performing tasks that involve sensitive system settings.
    3. Potential data loss: Modifying system files and settings with SYSTEM privileges can result in accidental data loss if not done correctly. Always double-check your actions and ensure you understand the implications of the changes you are making.

    Precautions when running an app as SYSTEM in Windows 11

    To minimize the risks associated with running applications as SYSTEM, follow these precautions:

    1. Create a system restore point: Before making any changes to your system, create a system restore point. This allows you to revert your system to a previous state if something goes wrong.
    2. Backup your data: Regularly back up your data to protect against potential data loss caused by system modifications or errors.
    3. Use trusted tools: Always use trusted and well-established tools when running applications as SYSTEM. This reduces the risk of exposing your system to malware or other security threats.
    4. Understand the changes you’re making: Ensure you have a clear understanding of the implications of the changes you are making to your system. This will help prevent accidental data loss or system instability.

    By following these precautions, you can make the most out of running applications as SYSTEM while minimizing the potential risks.

    Final thoughts

    Running applications as SYSTEM in Windows 11 is useful for performing advanced system configurations or troubleshooting tasks. The methods discussed in this article, including Advanced Run, NirCMD, PsExec, and Scheduled Task, provide you with various options for running applications like CMD, PowerShell, and Regedit with SYSTEM or TrustedInstaller privileges.

    However, be cautious when using SYSTEM-level permissions, as it allows you to make changes that could potentially harm your system if not done correctly. Always take necessary precautions and follow the best practices to minimize risks and ensure the safety and stability of your system.


    Nyau Wai Hoe
    Nyau Wai Hoe is the Founder and Chief Editor of WindowsDigitals.com. With a degree in software engineering and over 12 years of experience in the tech support industry, Nyau has established himself as an expert in the field, with a primary focus on the Microsoft Windows operating system. As a tech enthusiast, he loves exploring new technologies and leveraging them to solve real-life problems.

    Share via
    Copy link