<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: Run A Process As NT AUTHORITY\SYSTEM</title>
	<atom:link href="http://www.prashanthpai.com/blog/run-a-process-as-nt-authoritysystem/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.prashanthpai.com/blog/run-a-process-as-nt-authoritysystem/</link>
	<description>PP writes</description>
	<lastBuildDate>Fri, 03 Feb 2012 19:09:42 +0000</lastBuildDate>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3.1</generator>
	<item>
		<title>By: Cat</title>
		<link>http://www.prashanthpai.com/blog/run-a-process-as-nt-authoritysystem/#comment-678</link>
		<dc:creator>Cat</dc:creator>
		<pubDate>Tue, 25 Aug 2009 04:54:31 +0000</pubDate>
		<guid isPermaLink="false">http://www.prashanthpai.com/blog/?p=170#comment-678</guid>
		<description>Hi, thanks for your reply! Alas, nothing I did from the elevated command worked, but I finally took your suggestion regarding booting from the Windows Installation disk. I dug them out of a file cabinet (I was shocked I could find them!), booted to a c: prompt and was finally able to delete the files. It was the only thing that worked, thanks!</description>
		<content:encoded><![CDATA[<p>Hi, thanks for your reply! Alas, nothing I did from the elevated command worked, but I finally took your suggestion regarding booting from the Windows Installation disk. I dug them out of a file cabinet (I was shocked I could find them!), booted to a c: prompt and was finally able to delete the files. It was the only thing that worked, thanks!</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Prashanth Pai</title>
		<link>http://www.prashanthpai.com/blog/run-a-process-as-nt-authoritysystem/#comment-651</link>
		<dc:creator>Prashanth Pai</dc:creator>
		<pubDate>Thu, 13 Aug 2009 13:19:42 +0000</pubDate>
		<guid isPermaLink="false">http://www.prashanthpai.com/blog/?p=170#comment-651</guid>
		<description>cd command will return c:\windows\system32 itself .... there is nothing wring with this output :)

Try any of these :
- try deleting those files from &quot;elevated&quot; command prompt using del command with /f switch. Check del/? for usage.
- try directly deleting or doing the same as above from safe mode
- Boot from any linux live CD and delete the files.</description>
		<content:encoded><![CDATA[<p>cd command will return c:\windows\system32 itself &#8230;. there is nothing wring with this output <img src='http://www.prashanthpai.com/blog/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' /> </p>
<p>Try any of these :<br />
- try deleting those files from &#8220;elevated&#8221; command prompt using del command with /f switch. Check del/? for usage.<br />
- try directly deleting or doing the same as above from safe mode<br />
- Boot from any linux live CD and delete the files.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Cat</title>
		<link>http://www.prashanthpai.com/blog/run-a-process-as-nt-authoritysystem/#comment-649</link>
		<dc:creator>Cat</dc:creator>
		<pubDate>Thu, 13 Aug 2009 04:59:36 +0000</pubDate>
		<guid isPermaLink="false">http://www.prashanthpai.com/blog/?p=170#comment-649</guid>
		<description>Hello, I hope my note finds you doing well. I am running Windows XP SP3.

I tried your tip here, to run a process as NT Authority\System, but I did not get the same result. I was able to successfully launch a new command prompt which had C:\WINDOWS\System32\scvhost.exe on top. However, when I typed cd at the prompt it merely returned c:\windows\system32 not NT AUTHORITY\SYSTEM.

I used the command prompt to open Task Manager, deleted explorer.exe, and then ran explorer.exe again. My desktop and icons change and so I was supposedly running as &quot;System.&quot; Alas, I am still unable to delete some pesky files and empty folders which Unlocker and WhoLockMe says are being locked by Domain: NT Authority, User: System.

When I click on Start, it says SYSTEM right on top. However, when open Task Manager and click on the Users tab, my name appears and not SYSTEM. I am not sure where I went wrong. Any ideas?

Kind regards, cheers,
Cat</description>
		<content:encoded><![CDATA[<p>Hello, I hope my note finds you doing well. I am running Windows XP SP3.</p>
<p>I tried your tip here, to run a process as NT Authority\System, but I did not get the same result. I was able to successfully launch a new command prompt which had C:\WINDOWS\System32\scvhost.exe on top. However, when I typed cd at the prompt it merely returned c:\windows\system32 not NT AUTHORITY\SYSTEM.</p>
<p>I used the command prompt to open Task Manager, deleted explorer.exe, and then ran explorer.exe again. My desktop and icons change and so I was supposedly running as &#8220;System.&#8221; Alas, I am still unable to delete some pesky files and empty folders which Unlocker and WhoLockMe says are being locked by Domain: NT Authority, User: System.</p>
<p>When I click on Start, it says SYSTEM right on top. However, when open Task Manager and click on the Users tab, my name appears and not SYSTEM. I am not sure where I went wrong. Any ideas?</p>
<p>Kind regards, cheers,<br />
Cat</p>
]]></content:encoded>
	</item>
</channel>
</rss>

