REMOTING TASKLIST tasklist /s remote host /u domain\user /p password cmd SYSTEMINFO systeminfo /s system /u domain\user /p password PSEXEC psexec \\computername -u user -p password -s (run command as system) cmd (opens a cmd window) POWERSHELL -WMI note: using credentials in a cmd only works with WMI cmd -ComputerName win7 (this only works without user/pwd because local credentials are the same on both systems) cmd -computername win10 -credential barney (prompts for pwd) $c = get-credential -credential barney - Stores the username and pwd for future cmds Create Multi cmd Sessions $session7 = new-PSSession -computername win7 $session10 = new-PSSession -computername win10 -credential $c POWERSHELL CIM note: CIM you must first open a session with the remote system and then reference that session in your CIM cmdlet $c = New-CimSession -computername win10 -credential fred $c | Get-CimInstance -ClassName Win32_Service | where state -match 'running' WMIC wmic /node:computer /user:username /password:pwd you can enable all privleges using /privileges:enable PSLOGLIST psloglist \\computername -u username -p password wevtutil wevtutil /r:computer /u:user /p:pwd REG FIND -m \\machiname ds commnads -s Server | -d Domain}] [-u UserName] [-p {Password