MS DOS Command
Microsoft Windows 8.1 Pro
Version 6.3.9600 (32 bits)
English – United Kingdom
A B C D E F G H I J K L M N O P Q R S T U V W X Y Z
A
APPEND Allows programs to open data files in specified directories as if they were in the current directory.
ARP Displays and modifies the IP-to-Physical address translation tables used by address resolution protocol (ARP).
ASSOC Displays or modifies file extension associations.
AT The AT command has been deprecated. Please use schtasks.exe instead.
ATTRIB Displays or changes file attributes.
AUDITPOL Audit Policy Program
B
BCDBOOT Bcdboot – Bcd boot file creation and repair tool. The bcdboot.exe command-line tool is used to copy critical boot files to the system partition and to create a new system BCD store.
BCDEDIT Sets properties in boot database to control boot loading.
BITSADMIN BITS administration utility.
BOOTCFG This command line tool can be used to configure, query, change or delete the boot entry settings in the BOOT.INI file.
BREAK Sets or clears extended CTRL+C checking.
C
CACLS Displays or modifies access control lists (ACLs) of files.
CALL Calls one batch program from another.
CD Displays the name of or changes the current directory.
CERTREQ CertReq.exe
CERTUTIL CertUtil.exe
CHANGE Remote Desktop Services Change Utility
CHCP Displays or sets the active code page number.
CHDIR Displays the name of or changes the current directory.
CHGLOGON Enable, disable, or drain session logins.
CHGPORT List or change COM port mappings for DOS application compatibility.
CHGUSR Change Install Mode.
CHKDSK Checks a disk and displays a status report.
CHKNTFS Displays or modifies the checking of disk at boot time.
CHOICE This tool allows users to select one item from a list of choices and returns the index of the selected choice.
CIPHER Displays or alters the encryption of directories [files] on NTFS partitions.
CLIP Redirects output of command line tools to the Windows clipboard. This text output can then be pasted into other programs.
CLS Clears the screen.
CMD Starts a new instance of the Windows command interpreter.
CMDKEY Creates, displays, and deletes stored user names and passwords.
COLOR Sets the default console foreground and background colors.
COMP Compares the contents of two files or sets of files.
COMPACT Displays or alters the compression of files on NTFS partitions.
CONVERT Converts FAT volumes to NTFS. You cannot convert the current drive.
COPY Copies one or more files to another location.
CSCRIPT Microsoft ® Console Based Script Host
D
DATE Displays or sets the date.
DEBUG Runs Debug, a program testing and editing tool.
DEFRAG Optimizes and defragments files on local volumes to improve system performance.
DEL Deletes one or more files.
DIR Displays a list of files and subdirectories in a directory.
DISKCOMP Compares the contents of two floppy disks.
DISKCOPY Copies the contents of one floppy disk to another.
DISKPART Displays or configures Disk Partition properties.
DISKPERF Disk Performance Configuration Utility
DISKRAID Microsoft DiskRAID version 6.3.9600
DISM DISM enumerates, installs, uninstalls, configures, and updates features and packages in Windows images. The commands that are available depend on the image being serviced and whether the image is offline or running.
DISPDIAG Logs display information to a file in the current directory.
DOSKEY Edits command lines, recalls Windows commands, and creates macros.
DPATH Allows programs to open data files in specified directories as if they were in the current directory.
DRIVERQUERY Displays current device driver status and properties.
E
ECHO Displays messages, or turns command echoing on or off.
EDIT MS-DOS Editor Version 2.0.026 Copyright (c) Microsoft Corp 1995.
EDLIN Starts Edlin, a line-oriented text editor.
ENDLOCAL Ends localization of environment changes in a batch file.
ERASE Deletes one or more files.
EVENTCREATE This command line tool enables an administrator to create a custom event ID and message in a specified event log.
EXE2BIN Converts .EXE (executable) files to binary format.
EXIT Quits the CMD.EXE program (command interpreter).
EXPAND Expands one or more compressed files.
F
FC Compares two files or sets of files, and displays the differences between them.
FILEVER Prints file version information.
FIND Searches for a text string in a file or files.
FINDSTR Searches for strings in files.
FINGER Displays information about a user on a specified system running the Finger service. Output varies based on the remote system.
FLTMC Filter Manager Control Program
FOR Runs a specified command for each file in a set of files.
FORFILES Selects a file (or set of files) and executes a command on that file. This is helpful for batch jobs.
FORMAT Formats a disk for use with Windows.
FSUTIL Displays or configures the file system properties.
FTP Transfers files to and from a computer running an FTP server service (sometimes called a daemon). Ftp can be used interactively.
FTYPE Displays or modifies file types used in file extension associations.
G
GETMAC This tool enables an administrator to display the MAC address for network adapters on a system.
GOTO Directs the Windows command interpreter to a labeled line in a batch program.
GPRESULT Displays Group Policy information for machine or user.
GPUPDATE Updates multiple Group Policy settings.
GRAFTABL Enables Windows to display an extended character set in graphics mode.
H
HELP Provides Help information for Windows commands.
HOSTNAME Prints the name of the current host.
I
ICACLS Display, modify, backup, or restore ACLs for files and directories.
IF Performs conditional processing in batch programs.
IPCONFIG The default is to display only the IP address, subnet mask and default gateway for each adapter bound to TCP/IP.
ISCSICLI Microsoft iSCSI Initiator Version 6.3 Build 9600
L
LABEL Creates, changes, or deletes the volume label of a disk.
LODCTR Updates registry values related to performance counters.
LOGMAN Microsoft r Logman.exe (6.3.9600.16384)
LOGOFF Terminates a session.
M
MAKECAB Cabinet Maker – Lossless Data Compression Tool
MANAGE-BDE Configures BitLocker Drive Encryption on disk volumes.
MD Creates a directory.
MEM Displays the amount of used and free memory in your system.
MKDIR Creates a directory.
MKLINK Creates Symbolic Links and Hard Links
MODE Configures a system device.
MORE Displays output one screen at a time.
MOUNTVOL Creates, deletes, or lists a volume mount point.
MOVE Moves one or more files from one directory to another directory.
MRINFO Multicast Information
MSG Send a message to a user.
N
NBTSTAT Displays protocol statistics and current TCP/IP connections using NBT (NetBIOS over TCP/IP).
NET Net Command
NETCFG WinPE network installer
NETSH Network Command Shell
NETSTAT Displays protocol statistics and current TCP/IP network connections.
NLSFUNC Loads country-specific information.
NLTEST Microsoft® Logon Server Test Utility
NSLOOKUP nslookup
O
OPENFILES Displays files opened by remote users for a file share.
P
PATH Displays or sets a search path for executable files.
PATHPING TCP/IP PathPing Command
PAUSE Suspends processing of a batch file and displays a message.
PING TCP/IP Ping Command
PNPUNATTEND AuditSystem, Unattend online driver install
PNPUTIL Microsoft PnP Utility
POPD Restores the previous value of the current directory saved by PUSHD.
POWERCFG Enables users to control power settings on a local system.
PRINT Prints a text file.
PRINTBRM Access the Backup Recovery Migration tool through a command line interface.
PROMPT Changes the Windows command prompt.
PSEXEC Execute processes remotely
PSFILE PsFile lists or closes files opened remotely.
PSGETSID Translates SIDs to names and vice versa
PSINFO Local and remote system information viewer
PSKILL Terminates processes on local or remote systems
PSLIST Sysinternals PsList
PSLOGGEDON See who’s logged on
PSLOGLIST local and remote event log viewer
PSPASSWD Local and remote password changer
PSSERVICE Service information and configuration utility
PSSHUTDOWN Shutdown, logoff and power manage local and remote systems
PSSUSPEND Process Suspender
PUSHD Saves the current directory then changes it.
Q
QAPPSRV Displays the available Remote Desktop Session Host servers on the network.
QPROCESS Displays information about processes.
QUERY MultiUser Query Utility
QUSER Display information about users logged on to the system.
QWINSTA Display information about Remote Desktop Services sessions.
R
RASDIAL Remote Access Command Line Dial UI
RD Removes a directory.
REAGENTC Configures the Windows Recovery Environment (Windows RE) and system reset.
RECIMG Recovery Image Management Utility
RECOVER Recovers readable information from a bad or defective disk.
REG Registry Console Tool
REGINI Registry Initializer
REGISTER-CIMPROVIDER Registers CIM Provider into system
RELOG Relog creates new performance logs from data in existing performance logs by changing the sampling rate and/or converting the file format. Supports all performance log formats, including Windows NT 4.0 compressed logs.
REM Records comments (remarks) in batch files or CONFIG.SYS.
REN Renames a file or files.
RENAME Renames a file or files.
REPAIR-BDE BitLocker Drive Encryption: Repair Tool version 6.3.9600
REPLACE Replaces files.
RESET Remote Desktop Services Reset Utility
RMDIR Removes a directory.
ROBOCOPY Advanced utility to copy files and directory trees
ROUTE Manipulates network routing tables.
RPCPING RPC Ping Utility
RUNAS Run As Utility
S
SC Displays or configures services (background processes).
SCHTASKS Schedules commands and programs to run on a computer.
SDBINST Application Compatibility Database Installer
SECEDIT Windows Security Configuration Editor Command Tool
SET Displays, sets, or removes Windows environment variables.
SETLOCAL Begins localization of environment changes in a batch file.
SETVER Sets the version number that MS-DOS reports to a program.
SETX Creates or modifies environment variables in the user or system environment. Can set variables based on arguments, regkeys or file input.
SFC Scans the integrity of all protected system files and replaces incorrect versions with correct Microsoft versions.
SHIFT Shifts the position of replaceable parameters in batch files.
SHUTDOWN Allows proper local or remote shutdown of machine.
SORT Sorts input.
START Starts a separate window to run a specified program or command.
SUBINACL SubInAcl version 5.2.3790.1180
SUBST Associates a path with a drive letter.
SXSTRACE Sxs Tracing Tool
SYSTEMINFO Displays machine specific properties and configuration.
T
TAKEOWN This tool allows an administrator to recover access to a file that was denied by re- assigning file ownership.
TASKKILL Kill or stop a running process or application.
TASKLIST Displays all currently running tasks including services.
TIME Displays or sets the system time.
TIMEOUT This utility accepts a timeout parameter to wait for the specified time period (in seconds) or until any key is pressed. It also accepts a parameter to ignore the key press.
TITLE Sets the window title for a CMD.EXE session.
TRACERPT Event Trace Report Tool
TRACERT TCP/IP Traceroute Command
TREE Graphically displays the directory structure of a drive or path.
TSCON Attaches a user session to a remote desktop session.
TSDISCON Disconnects a Remote Desktop Services session.
TSKILL Ends a process.
TYPE Displays the contents of a text file.
TYPEPERF Typeperf writes performance data to the command window or to a log file. To stop Typeperf, press CTRL+C.
TZUTIL Windows Time Zone Utility
U
UNLODCTR Removes counter names and explain text for the specified extensible counter.
V
VAULTCMD Creates, displays and deletes stored credentials.
VER Displays the Windows version.
VERIFIER Driver Verifier Manager
VERIFY Tells Windows whether to verify that your files are written correctly to a disk.
VOL Displays a disk volume label and serial number.
VSSADMIN vssadmin 1.1 – Volume Shadow Copy Service administrative command-line tool
W
W32TM Windows Time Service Diagnostic Tool
WAITFOR This tool sends, or waits for, a signal on a system. When /S is not specified, the signal will be broadcasted to all the systems in a domain. If /S is specified, then the signal will be sent only to the specified system.
WBADMIN wbadmin 1.0 – Backup command-line tool
WECUTIL Event Collector Command Line Utility
WEVTUTIL Eventing Command Line Utility
WHERE Displays the location of files that match the search pattern. By default, the search is done along the current directory and in the paths specified by the PATH environment variable.
WHOAMI This utility can be used to get user name and group information along with the respective security identifiers (SID), claims, privileges, logon identifier (logon ID) for the current user on the local system. I.e. who is the current logged on user? If no switch is specified, tool displays the user name in NTLM format (domain\username).
WINRM Windows Remote Management (WinRM) is the Microsoft implementation of the WS- Management protocol which provides a secure way to communicate with local and remote computers using web services.
WINRS winrs
WMIC Displays WMI information inside interactive command shell.
X
XCOPY Copies files and directory trees.
tasklist [/s [/u [] [/p ]]] [{/m | /svc | /v}] [/fo {table | list | csv}] [/nh] [/fi [/fi [ … ]]]
Parameters
PARAMETERS
Parameter Description /s Specifies the name or IP address of a remote computer (do not use backslashes). The default is the local computer. /u \ Runs the command with the account permissions of the user who is specified by or by \. The /u parameter can be specified only if /s is also specified. The default is the permissions of the user who is currently logged on to the computer that is issuing the command. /p Specifies the password of the user account that is specified in the /u parameter. /m Lists all tasks with DLL modules loaded that match the given pattern name. If the module name is not specified, this option displays all modules loaded by each task. svc Lists all the service information for each process without truncation. Valid when the /fo parameter is set to table. /v Displays verbose task information in the output. For complete verbose output without truncation, use /v and /svc together. /fo {table | list | csv} Specifies the format to use for the output. Valid values are table, list, and csv. The default format for output is table. /nh Suppresses column headers in the output. Valid when the /fo parameter is set to table or csv. /fi Specifies the types of processes to include in or exclude from the query. You can use more than one filter or use the wildcard character () to specify all tasks or image names. The valid filters are listed in the Filter names, operators, and values section of this article. /? Displays help at the command prompt.
Filter names, operators, and values
FILTER NAMES, OPERATORS, AND VALUES
Filter Name Valid Operators
Valid Value(s)
STATUS eq, ne RUNNING | NOT RESPONDING | UNKNOWN. This filter isn’t supported if you specify a remote system. IMAGENAME eq, ne Image name PID eq, ne, gt, lt, ge, le PID value SESSION eq, ne, gt, lt, ge, le Session number SESSIONNAME eq, ne Session name CPUtime eq, ne, gt, lt, ge, le CPU time in the format HH:MM:SS, where MM and SS are between 0 and 59 and HH is any unsigned number MEMUSAGE eq, ne, gt, lt, ge, le Memory usage in KB USERNAME eq, ne Any valid user name ( or ) SERVICES eq, ne Service name WINDOWTITLE eq, ne Window title. This filter isn’t supported if you specify a remote system. MODULES eq, ne DLL name Examples
To list all tasks with a process ID greater than 1000, and display them in csv format, type:
Copy tasklist /v /fi “PID gt 1000” /fo csv
To list the system processes that are currently running, type:
Copy tasklist /fi “USERNAME ne NT AUTHORITY\SYSTEM” /fi “STATUS eq running”
To list detailed information for all processes that are currently running, type:
Copy tasklist /v /fi “STATUS eq running”
To list all the service information for processes on the remote computer srvmain, which has a DLL name beginning with ntdll, type:
Copy tasklist /s srvmain /svc /fi “MODULES eq ntdll*”
To list the processes on the remote computer srvmain, using the credentials of your currently logged-on user account, type:
Copy tasklist /s srvmain
To list the processes on the remote computer srvmain, using the credentials of the user account Hiropln, type:
Copy tasklist /s srvmain /u maindom\hiropln /p p@ssW23
Published @ September 21, 2021 8:25 am