MS-DOS commands for Windows®
2000/XP/Vista/7/Server 2003/Server 2008

ARP

Availability: +Windows 2000 Professional | +Windows 2000 Server

Displays and modifies the IP-to-Physical address translation tables used by address resolution protocol (ARP).

ARP -s inet_addr eth_addr [if_addr]

ARP -d inet_addr [if_addr]

ARP -a [inet_addr] [-N if_addr] [-v]

Example:

ASSOC

Availability: +Windows 2000 Professional | +Windows 2000 Server

Displays or modifies file extension associations.

ASSOC [.ext[=[fileType]]]

Type ASSOC without parameters to display the current file associations. If ASSOC is invoked with just a file extension, it displays the current file association for that file extension. Specify nothing for the file type and the command will delete the association for the file extension.

ATTRIB

Availability: +Windows 2000 Professional | +Windows 2000 Server

Displays or changes file attributes.

ATTRIB [+R | -R] [+A | -A ] [+S | -S] [+H | -H] [+I | -I] [drive:][path][filename] [/S [/D] [/L]]

BREAK

Availability: +Windows 2000 Professional | +Windows 2000 Server

Sets or clears extended CTRL+C checking on DOS system.

This is present for compatibility with DOS systems. It has no effect under Windows.

If Command Extensions are enabled, and running on the Windows platform, then the BREAK command will enter a hard coded breakpoint if being debugged by a debugger.

BCDEDIT

Availability: +Windows Vista | +Windows Server 2008

BCDEDIT - Boot Configuration Data Store Editor

The Bcdedit.exe command-line tool modifies the boot configuration data store. The boot configuration data store contains boot configuration parameters and controls how the operating system is booted. These parameters were previously in the Boot.ini file (in BIOS-based operating systems) or in the nonvolatile RAM entries (in Extensible Firmware Interface-based operating systems). You can use Bcdedit.exe to add, delete, edit, and append entries in the boot configuration data store.

For detailed command and option information, type bcdedit.exe /? <command>. For example, to display detailed information about the /createstore command, type: bcdedit.exe /? /createstore

For an alphabetical list of topics in this help file, run bcdedit /? TOPICS.

== Commands that operate on a store ==

== Commands that operate on entries in a store ==

Run bcdedit /? ID for information about identifiers used by these commands.

== Commands that operate on entry options ==

Run bcdedit /? TYPES for a list of datatypes used by these commands.

Run bcdedit /? FORMATS for a list of valid data formats.

== Commands that control output ==

Running bcdedit by itself is equivalent to running bcdedit /enum ACTIVE.

== Commands that control the boot manager ==

== Commands that control Emergency Management Services for a boot application ==

== Command that control debugging ==

CALL

Calls one batch program from another.

CALL [drive:][path]filename [batch-parameters]

If Command Extensions are enabled CALL changes as follows:

CALL command now accepts labels as the target of the CALL. The syntax is:

CALL :label arguments

A new batch file context is created with the specified arguments and control is passed to the statement after the label specified. You must “exit” twice by reaching the end of the batch script file twice. The first time you read the end, control will return to just after the CALL statement. The second time will exit the batch script. Type GOTO /? for a description of the GOTO :EOF extension that will allow you to “return” from a batch script.

In addition, expansion of batch script argument references (%0, %1, etc.) have been changed as follows:

%* in a batch script refers to all the arguments (e.g. %1 %2 %3 %4 %5 ...)

Substitution of batch parameters (%n) has been enhanced. You can now use the following optional syntax:

The modifiers can be combined to get compound results:

In the above examples %1 and PATH can be replaced by other valid values. The %~ syntax is terminated by a valid argument number. The %~ modifiers may not be used with %*.

CD, CHDIR

Availability: +Windows 2000 Professional | +Windows 2000 Server

Displays the name of or changes the current directory.

CHDIR [/D] [drive:][path]

CHDIR [..]

CD [/D] [drive:][path]

CD [..]

Type CD drive: to display the current directory in the specified drive. Type CD without parameters to display the current drive and directory.

Use the /D switch to change current drive in addition to changing current directory for a drive.

If Command Extensions are enabled CHDIR changes as follows:

The current directory string is converted to use the same case as the on disk names. So CD C:\TEMP would actually set the current directory to C:\Temp if that is the case on disk.

CHDIR command does not treat spaces as delimiters, so it is possible to CD into a subdirectory name that contains a space without surrounding the name with quotes. For example:

cd \winnt\profiles\username\programs\start menu

is the same as:

cd "\winnt\profiles\username\programs\start menu"

which is what you would have to type if extensions were disabled.

CHCP

Displays or sets the active code page number.

CHCP [nnn]

Type CHCP without a parameter to display the active code page number.

CIPHER

Displays or alters the encryption of directories [files] on NTFS partitions.

CIPHER [/E | /D | /C] [/S:directory] [/B] [/H] [pathname [...]]

CIPHER /K [/ECC:256|384|521]

CIPHER /R:filename [/SMARTCARD] [/ECC:256|384|521]

CIPHER /U [/N]

CIPHER /W:directory

CIPHER /X[:efsfile] [filename]

CIPHER /Y

CIPHER /ADDUSER [/CERTHASH:hash | /CERTFILE:filename | /USER:username] [/S:directory] [/B] [/H] [pathname [...]]

CIPHER /FLUSHCACHE [/SERVER:servername]

CIPHER /REMOVEUSER /CERTHASH:hash [/S:directory] [/B] [/H] [pathname [...]]

CIPHER /REKEY [pathname [...]]

Used without parameters, CIPHER displays the encryption state of the current directory and any files it contains. You may use multiple directory names and wildcards. You must put spaces between multiple parameters.

CLIP [+Server 2008|+Vista]

Description: Redirects output of command line tools to the Windows clipboard. This text output can then be pasted into other programs.

Parameter List:

Examples:

CLS [+Server 2003|+XP]

Clears the screen.

CLS

CMD

Availability: +Windows 2000 Professional | +Windows 2000 Server

Starts a new instance of the Windows command interpreter

CMD [/A | /U] [/Q] [/D] [/E:ON | /E:OFF] [/F:ON | /F:OFF] [/V:ON | /V:OFF] [[/S] [/C | /K] string]

Note that multiple commands separated by the command separator '&&' are accepted for string if surrounded by quotes. Also, for compatibility reasons, /X is the same as /E:ON, /Y is the same as /E:OFF and /R is the same as /C. Any other switches are ignored.

If /C or /K is specified, then the remainder of the command line after the switch is processed as a command line, where the following logic is used to process quote (") characters:

1. If all of the following conditions are met, then quote characters on the command line are preserved:

- no /S switch

- exactly two quote characters

- no special characters between the two quote characters, where special is one of: & < > ( ) @ ^ |

- there are one or more whitespace characters between the two quote characters

- the string between the two quote characters is the name of an executable file.

2. Otherwise, old behavior is to see if the first character is a quote character and if so, strip the leading character and remove the last quote character on the command line, preserving any text after the last quote character.

If /D was NOT specified on the command line, then when CMD.EXE starts, it looks for the following REG_SZ/REG_EXPAND_SZ registry variables, and if either or both are present, they are executed first.

HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor\AutoRun

and/or

HKEY_CURRENT_USER\Software\Microsoft\Command Processor\AutoRun

Command Extensions are enabled by default. You may also disable extensions for a particular invocation by using the /E:OFF switch. You can enable or disable extensions for all invocations of CMD.EXE on a machine and/or user logon session by setting either or both of the following REG_DWORD values in the registry using REGEDIT.EXE:

HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor\EnableExtensions

and/or

HKEY_CURRENT_USER\Software\Microsoft\Command Processor\EnableExtensions

to either 0x1 or 0x0. The user specific setting takes precedence over the machine setting. The command line switches take precedence over the registry settings.

The command extensions involve changes and/or additions to the following commands:

DEL or ERASE ; COLOR ; CD or CHDIR ; MD or MKDIR ; PROMPT ; PUSHD ; POPD ; SET ; SETLOCAL ; ENDLOCAL ; IF ; FOR ; CALL ; SHIFT ; GOTO ; START (also includes changes to external command invocation) ; ASSOC ; FTYPE

To get specific details, type commandname /? to view the specifics.

Delayed environment variable expansion is NOT enabled by default. You can enable or disable delayed environment variable expansion for a particular invocation of CMD.EXE with the /V:ON or /V:OFF switch. You can enable or disable delayed expansion for all invocations of CMD.EXE on a machine and/or user logon session by setting either or both of the following REG_DWORD values in the registry using REGEDIT.EXE:

HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor\DelayedExpansion

and/or

HKEY_CURRENT_USER\Software\Microsoft\Command Processor\DelayedExpansion

to either 0x1 or 0x0. The user specific setting takes precedence over the machine setting. The command line switches take precedence over the registry settings.

If delayed environment variable expansion is enabled, then the exclamation character can be used to substitute the value of an environment variable at execution time.

You can enable or disable file name completion for a particular invocation of CMD.EXE with the /F:ON or /F:OFF switch. You can enable or disable completion for all invocations of CMD.EXE on a machine and/or user logon session by setting either or both of the following REG_DWORD values in the registry using REGEDIT.EXE:

HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor\CompletionChar

HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor\PathCompletionChar

and/or

HKEY_CURRENT_USER\Software\Microsoft\Command Processor\CompletionChar

HKEY_CURRENT_USER\Software\Microsoft\Command Processor\PathCompletionChar

with the hex value of a control character to use for a particular function (e.g. 0x4 is Ctrl-D and 0x6 is Ctrl-F). The user specific settings take precedence over the machine settings. The command line switches take precedence over the registry settings.

If completion is enabled with the /F:ON switch, the two control characters used are Ctrl-D for directory name completion and Ctrl-F for file name completion. To disable a particular completion character in the registry, use the value for space (0x20) as it is not a valid control character.

Completion is invoked when you type either of the two control characters. The completion function takes the path string to the left of the cursor appends a wild card character to it if none is already present and builds up a list of paths that match. It then displays the first matching path. If no paths match, it just beeps and leaves the display alone. Thereafter, repeated pressing of the same control character will cycle through the list of matching paths. Pressing the Shift key with the control character will move through the list backwards. If you edit the line in any way and press the control character again, the saved list of matching paths is discarded and a new one generated. The same occurs if you switch between file and directory name completion. The only difference between the two control characters is the file completion character matches both file and directory names, while the directory completion character only matches directory names. If file completion is used on any of the built in directory commands (CD, MD or RD) then directory completion is assumed.

The completion code deals correctly with file names that contain spaces or other special characters by placing quotes around the matching path. Also, if you back up, then invoke completion from within a line, the text to the right of the cursor at the point completion was invoked is discarded.

The special characters that require quotes are: <space> & ( ) [ ] { } ^ = ; ! ' + , ` ~

CMSTP [+Server 2008|+Vista]

Connection Manager Profile Installer

Modes:

Profile Install -- cmstp.exe [/ni /ns /nf /s /su /sd /au] <Full Path to Profile Inf>

Profile Uninstall -- cmstp.exe /u [/s] <Full Path to Profile Inf>

Help -- cmstp.exe /?

Long paths to Inf files must be enclosed in double quotes (").

Install Modifiers:

Uninstall Modifiers:

Please see the Connection Manager Administration Kit [CMAK] documentation for further details about the usage of cmstp.exe.

More details/examples here <http://technet.microsoft.com/en-us/library/ff961501(v=ws.10)>

COLOR

Availability: +Windows 2000 Professional | +Windows 2000 Server

Sets the default console foreground and background colors.

COLOR [attr]

Color attributes are specified by TWO hex digits -- the first corresponds to the background; the second the foreground. Each digit can be any of the following values:

If no argument is given, this command restores the color to what it was when CMD.EXE started. This value either comes from the current console window, the /T command line switch or from the DefaultColor registry value.

The COLOR command sets ERRORLEVEL to 1 if an attempt is made to execute the COLOR command with a foreground and background color that are the same.

Example: COLOR fc produces light red on bright white

COMP [+Server 2003|+XP]

Compares the contents of two files or sets of files.

COMP [data1] [data2] [/D] [/A] [/L] [/N=number] [/C] [/OFF[LINE]]

To compare sets of files, use wildcards in data1 and data2 parameters.

COMPACT [+Server 2003|+XP]

Displays or alters the compression of files on NTFS partitions.

COMPACT [/C | /U] [/S[:dir]] [/A] [/I] [/F] [/Q] [filename [...]]

Used without parameters, COMPACT displays the compression state of the current directory and any files it contains. You may use multiple filenames and wildcards. You must put spaces between multiple parameters.

CONVERT [+Server 2003|+XP]

Converts a FAT volume to NTFS.

CONVERT volume /FS:NTFS [/V] [/CvtArea:filename] [/NoSecurity] [/X]

DATE

Displays or sets the date.

DATE [/T | date]

Type DATE without parameters to display the current date setting and a prompt for a new one. Press ENTER to keep the same date.

If Command Extensions are enabled the DATE command supports the /T switch which tells the command to just output the current date, without prompting for a new date.

DEL, ERASE

Deletes one or more files.

DEL [/P] [/F] [/S] [/Q] [/A[[:]attributes]] names

ERASE [/P] [/F] [/S] [/Q] [/A[[:]attributes]] names

If Command Extensions are enabled DEL and ERASE change as follows:

The display semantics of the /S switch are reversed in that it shows you only the files that are deleted, not the ones it could not find.

DIR

Displays a list of files and subdirectories in a directory.

DIR [drive:][path][filename] [/A[[:]attributes]] [/B] [/C] [/D] [/L] [/N] [/O[[:]sortorder]] [/P] [/Q] [/R] [/S] [/T[[:]timefield]] [/W] [/X] [/4]

Switches may be preset in the DIRCMD environment variable. Override preset switches by prefixing any switch with - (hyphen)--for example, /-W.

DOSKEY

Edits command lines, recalls Windows commands, and creates macros.

DOSKEY [/REINSTALL] [/LISTSIZE=size] [/MACROS[:ALL | :exename]] [/HISTORY] [/INSERT | /OVERSTRIKE] [/EXENAME=exename] [/MACROFILE=filename] [macroname=[text]]

UP and DOWN ARROWS recall commands; ESC clears command line; F7 displays command history; ALT+F7 clears command history; F8 searches command history; F9 selects a command by number; ALT+F10 clears macro definitions.

The following are some special codes in Doskey macro definitions:

DRIVERQUERY

DRIVERQUERY [/S system [/U username [/P [password]]]] [/FO format] [/NH] [/SI] [/V]

Description: Enables an administrator to display a list of installed device drivers.

Parameter List:

Examples: DRIVERQUERY ; DRIVERQUERY /FO CSV /SI ; DRIVERQUERY /NH ; DRIVERQUERY /S ipaddress /U user /V ;

DRIVERQUERY /S system /U domain\user /P password /FO LIST

DXDIAG

DirectX Diagnostic Tool

Usage: dxdiag [/whql:on | /whql:off] [/64bit] [/x outfile] [/t outfile]

Note: Checking for WHQL digital signatures may connect via internet to update WHQL certificates.

ECHO

Displays messages, or turns command-echoing on or off.

Type ECHO without parameters to display the current echo setting.

ENDLOCAL

Ends localization of environment changes in a batch file.

Environment changes made after ENDLOCAL has been issued are not local to the batch file; the previous settings are not restored on termination of the batch file.

ENDLOCAL

If Command Extensions are enabled ENDLOCAL changes as follows:

If the corresponding SETLOCAL enabled or disabled command extensions using the new ENABLEEXTENSIONS or DISABLEEXTENSIONS options, then after the ENDLOCAL, the enabled/disabled state of command extensions will be restored to what it was prior to the matching SETLOCAL command execution.

ERASE

See DEL.

EVENTCREATE

EVENTCREATE [/S system [/U username [/P [password]]]] /ID eventid [/L logname] [/SO srcname] /T type /D description

Description: This command line tool enables an administrator to create a custom event ID and message in a specified event log.

Parameter List:

Examples:

EVENTCREATE /T ERROR /ID 1000 /L APPLICATION /D "My custom error event for the application log"

EVENTCREATE /T ERROR /ID 999 /L APPLICATION /SO WinWord /D "Winword event 999 happened due to low diskspace"

EVENTCREATE /S system /T ERROR /ID 100 /L APPLICATION /D "Custom job failed to install"

EVENTCREATE /S system /U user /P password /ID 1 /T ERROR /L APPLICATION /D "User access failed due to invalid user credentials"

EXIT

Quits the CMD.EXE program (command interpreter) or the current batch script.

EXIT [/B] [exitCode]

EXPAND

Microsoft (R) File Expansion Utility Version 6.0.6001.18000

Copyright (c) Microsoft Corporation. All rights reserved.

Expands one or more compressed files.

EXPAND [-r] Source Destination

EXPAND -r Source [Destination]

EXPAND -D Source.cab [-F:Files]

EXPAND Source.cab -F:Files Destination

FC

Availability: +Windows 2000 Professional | +Windows 2000 Server

Compares two files or sets of files and displays the differences between them.

FC [/A] [/C] [/L] [/LBn] [/N] [/OFF[LINE]] [/T] [/U] [/W] [/nnnn] [drive1:][path1]filename1 [drive2:][path2]filename2

FC /B [drive1:][path1]filename1 [drive2:][path2]filename2

FIND

Availability: +Windows 2000 Professional | +Windows 2000 Server

Searches for a text string in a file or files.

FIND [/V] [/C] [/N] [/I] [/OFF[LINE]] "string" [[drive:][path]filename[ ...]]

If a path is not specified, FIND searches the text typed at the prompt or piped from another command.

FINDSTR

Availability: +Windows 2000 Professional | +Windows 2000 Server

Searches for strings in files.

FINDSTR [/B] [/E] [/L] [/R] [/S] [/I] [/X] [/V] [/N] [/M] [/O] [/P] [/F:file] [/C:string] [/G:file] [/D:dir list] [/A:color attributes] [/OFF[LINE]] strings [[drive:][path]filename[ ...]]

Use spaces to separate multiple search strings unless the argument is prefixed with /C. For example, 'FINDSTR "hello there" x.y' searches for "hello" or "there" in file x.y. 'FINDSTR /C:"hello there" x.y' searches for "hello there" in file x.y.

Regular expression quick reference:

For full information on FINDSTR regular expressions refer to the online Command Reference.

More details/examples here <http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/findstr.mspx>

FINGER

Availability: +Windows 2000 Professional | +Windows 2000 Server

Displays information about a user on a specified system running the Finger service. Output varies based on the remote system.

FINGER [-l] [user]@host [...]

FOR

Availability: +Windows 2000 Professional | +Windows 2000 Server

Runs a specified command for each file in a set of files.

FOR %variable IN (set) DO command [command-parameters]

To use the FOR command in a batch program, specify %%variable instead of %variable. Variable names are case sensitive, so %i is different from %I.

If Command Extensions are enabled, the following additional forms of the FOR command are supported:

FOR /D %variable IN (set) DO command [command-parameters]

If set contains wildcards, then specifies to match against directory names instead of file names.

FOR /R [[drive:]path] %variable IN (set) DO command [command-parameters]

Walks the directory tree rooted at [drive:]path, executing the FOR statement in each directory of the tree. If no directory specification is specified after /R then the current directory is assumed. If set is just a single period (.) character then it will just enumerate the directory tree.

FOR /L %variable IN (start,step,end) DO command [command-parameters]

The set is a sequence of numbers from start to end, by step amount. So (1,1,5) would generate the sequence 1 2 3 4 5 and (5,-1,1) would generate the sequence (5 4 3 2 1)

FOR /F ["options"] %variable IN (file-set) DO command [command-parameters]

FOR /F ["options"] %variable IN ("string") DO command [command-parameters]

FOR /F ["options"] %variable IN ('command') DO command [command-parameters]

or, if usebackq option present:

FOR /F ["options"] %variable IN (file-set) DO command [command-parameters]

FOR /F ["options"] %variable IN ('string') DO command [command-parameters]

FOR /F ["options"] %variable IN (`command`) DO command [command-parameters]

file-set is one or more file names. Each file is opened, read and processed before going on to the next file in file-set. Processing consists of reading in the file, breaking it up into individual lines of text and then parsing each line into zero or more tokens. The body of the for loop is then called with the variable value(s) set to the found token string(s). By default, /F passes the first blank separated token from each line of each file. Blank lines are skipped. You can override the default parsing behavior by specifying the optional "options" parameter. This is a quoted string which contains one or more keywords to specify different parsing options. The keywords are:

Some examples might help:

FOR /F "eol=; tokens=2,3* delims=, " %i in (myfile.txt) do @echo %i %j %k

would parse each line in myfile.txt, ignoring lines that begin with a semicolon, passing the 2nd and 3rd token from each line to the for body, with tokens delimited by commas and/or spaces. Notice the for body statements reference %i to get the 2nd token, %j to get the 3rd token, and %k to get all remaining tokens after the 3rd. For file names that contain spaces, you need to quote the filenames with double quotes. In order to use double quotes in this manner, you also need to use the usebackq option, otherwise the double quotes will be interpreted as defining a literal string to parse.

%i is explicitly declared in the for statement and the %j and %k are implicitly declared via the tokens= option. You can specify up to 26 tokens via the tokens= line, provided it does not cause an attempt to declare a variable higher than the letter 'z' or 'Z'. Remember, FOR variables are single-letter, case sensitive, global, and you can't have more than 52 total active at any one time.

You can also use the FOR /F parsing logic on an immediate string, by making the filenameset between the parenthesis a quoted string, using single quote characters. It will be treated as a single line of input from a file and parsed.

Finally, you can use the FOR /F command to parse the output of a command. You do this by making the filenameset between the parenthesis a back quoted string. It will be treated as a command line, which is passed to a child CMD.EXE and the output is captured into memory and parsed as if it was a file. So the following example:

FOR /F "usebackq delims==" %i IN (`set`) DO @echo %i

would enumerate the environment variable names in the current environment.

In addition, substitution of FOR variable references has been enhanced. You can now use the following optional syntax:

The modifiers can be combined to get compound results:

In the above examples %I and PATH can be replaced by other valid values. The %~ syntax is terminated by a valid FOR variable name. Picking upper case variable names like %I makes it more readable and avoids confusion with the modifiers, which are not case sensitive.

FORFILES

Availability: +Windows Vista | +Windows Server 2003

FORFILES [/P pathname] [/M searchmask] [/S] [/C command] [/D [+ | -] {dd/MM/yyyy | dd}]

Description: Selects a file (or set of files) and executes a command on that file. This is helpful for batch jobs.

Parameter List:

Examples:

FORFILES /?

FORFILES

FORFILES /P C:\WINDOWS /S /M DNS*.*

FORFILES /S /M *.txt /C "cmd /c type @file | more"

FORFILES /P C:\ /S /M *.bat

FORFILES /D -30 /M *.exe /C "cmd /c echo @path 0x09 was changed 30 days ago"

FORFILES /D 01/01/2001 /C "cmd /c echo @fname is new since Jan 1st 2001"

FORFILES /D +29/5/2012 /C "cmd /c echo @fname is new today"

FORFILES /M *.exe /D +1

FORFILES /S /M *.doc /C "cmd /c echo @fsize"

FORFILES /M *.txt /C "cmd /c if @isdir==FALSE notepad.exe @file"

FORMAT

Availability: +Windows 2000 Professional | +Windows 2000 Server

Formats a disk for use with Windows.

FORMAT volume [/FS:file-system] [/V:label] [/Q] [/A:size] [/C] [/X] [/P:passes]

FORMAT volume [/V:label] [/Q] [/F:size] [/P:passes]

FORMAT volume [/V:label] [/Q] [/T:tracks /N:sectors] [/P:passes]

FORMAT volume [/V:label] [/Q] [/P:passes]

FORMAT volume [/Q]

FTP

Transfers files to and from a computer running an FTP server service (sometimes called a daemon). Ftp can be used interactively.

FTP [-v] [-d] [-i] [-n] [-g] [-s:filename] [-a] [-A] [-x:sendbuffer] [-r:recvbuffer] [-b:asyncbuffers] [-w:windowsize] [host]

Notes:

- mget and mput commands take y/n/q for yes/no/quit.

- Use Control-C to abort commands.

FTYPE

Displays or modifies file types used in file extension associations

FTYPE [fileType[=[openCommandString]]]

Type FTYPE without parameters to display the current file types that have open command strings defined. FTYPE is invoked with just a file type, it displays the current open command string for that file type. Specify nothing for the open command string and the FTYPE command will delete the open command string for the file type. Within an open command string %0 or %1 are substituted with the file name being launched through the assocation. %* gets all the parameters and %2 gets the 1st parameter, %3 the second, etc. %~n gets all the remaining parameters starting with the nth parameter, where n may be between 2 and 9, inclusive. For example:

ASSOC .pl=PerlScript

FTYPE PerlScript=perl.exe %1 %*

would allow you to invoke a Perl script as follows: script.pl 1 2 3

If you want to eliminate the need to type the extensions, then do the following: set PATHEXT=.pl;%PATHEXT%

and the script could be invoked as follows: script 1 2 3

GETMAC

GETMAC [/S system [/U username [/P [password]]]] [/FO format] [/NH] [/V]

Description: This tool enables an administrator to display the MAC address for network adapters on a system.

Parameter List:

Examples: GETMAC /? ; GETMAC /FO CSV ; GETMAC /S system /NH /V ; GETMAC /S system /U user ;

GETMAC /S system /U domain\user /P password /FO list /V ; GETMAC /S system /U domain\user /P password /FO table /NH

GOTO

Directs cmd.exe to a labeled line in a batch program.

GOTO label

You type a label on a line by itself, beginning with a colon.

If Command Extensions are enabled GOTO changes as follows:

GOTO command now accepts a target label of :EOF which transfers control to the end of the current batch script file. This is an easy way to exit a batch script file without defining a label. Type CALL /? for a description of extensions to the CALL command that make this feature useful.

GPRESULT

GPRESULT [/S system [/U username [/P [password]]]] [/SCOPE scope] [/USER targetusername] [/R | /V | /Z] [(/X | /H) <filename> [/F]]

Description: This command line tool displays the Resultant Set of Policy (RSoP) information for a target user and computer.

Parameter List:

Examples: GPRESULT /R ; GPRESULT /H GPReport.html ; GPRESULT /USER targetusername /V ;

GPRESULT /S system /USER targetusername /SCOPE COMPUTER /Z ; GPRESULT /S system /U username /P password /SCOPE USER /V

GPUPDATE

Description: Updates Group Policies settings.

Syntax: GPUpdate [/Target:{Computer | User}] [/Force] [/Wait:<value>] [/Logoff] [/Boot] [/Sync]

Parameters:

GRAFTABL

Enable Windows to display an extended character set in graphics mode.

GRAFTABL [xxx]

GRAFTABL /STATUS

More details here <http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/graftabl.mspx>

HELP

Availability: +Windows 2000 Professional | +Windows 2000 Server

Provides help information for Windows commands.

HELP [command]

HOSTNAME

Availability: +Windows 2000 Professional | +Windows 2000 Server

Prints the name of the current host.

hostname

ICACLS

ICACLS name /save aclfile [/T] [/C] [/L] [/Q] stores the DACLs for the files and folders that match the name into aclfile for later use with /restore. Note that SACLs, owner, or integrity labels are not saved.

ICACLS directory [/substitute SidOld SidNew [...]] /restore aclfile [/C] [/L] [/Q] applies the stored DACLs to files in directory.

ICACLS name /setowner user [/T] [/C] [/L] [/Q] changes the owner of all matching names. This option does not force a change of ownership; use the takeown.exe utility for that purpose.

ICACLS name /findsid Sid [/T] [/C] [/L] [/Q] finds all matching names that contain an ACL explicitly mentioning Sid.

ICACLS name /verify [/T] [/C] [/L] [/Q] finds all files whose ACL is not in canonical form or whose lengths are inconsistent with ACE counts.

ICACLS name /reset [/T] [/C] [/L] [/Q] replaces ACLs with default inherited ACLs for all matching files.

ICACLS name [/grant[:r] Sid:perm[...]] [/deny Sid:perm [...]] [/remove[:g|:d]] Sid[...]] [/T] [/C] [/L] [/Q] [/setintegritylevel Level:policy[...]]

Note: Sids may be in either numerical or friendly name form. If a numerical form is given, affix a * to the start of the SID.

perm is a permission mask and can be specified in one of two forms:

ICACLS preserves the canonical ordering of ACE entries: Explicit denials; Explicit grants; Inherited denials; Inherited grants

Examples:

icacls c:\windows\* /save AclFile /T - Will save the ACLs for all files under c:\windows and its subdirectories to AclFile.

icacls c:\windows\ /restore AclFile - Will restore the Acls for every file within AclFile that exists in c:\windows and its subdirectories.

icacls file /grant Administrator:(D,WDAC) - Will grant the user Administrator Delete and Write DAC permissions to file.

icacls file /grant *S-1-1-0:(D,WDAC) - Will grant the user defined by sid S-1-1-0 Delete and Write DAC permissions to file.

IF

Performs conditional processing in batch programs.

IF [NOT] ERRORLEVEL number command

IF [NOT] string1==string2 command

IF [NOT] EXIST filename command

The ELSE clause must occur on the same line as the command after the IF. For example:

IF EXIST filename. (
  del filename.
) ELSE (
  echo filename. missing.
)

The following would NOT work because the del command needs to be terminated by a newline:

IF EXIST filename. del filename. ELSE echo filename. missing

Nor would the following work, since the ELSE command must be on the same line as the end of the IF command:

IF EXIST filename. del filename.
ELSE echo filename. missing

The following would work if you want it all on one line: IF EXIST filename. (del filename.) ELSE echo filename. missing

If Command Extensions are enabled IF changes as follows:

IF [/I] string1 compare-op string2 command

IF CMDEXTVERSION number command

IF DEFINED variable command

where compare-op may be one of:

and the /I switch, if specified, says to do case insensitive string compares. The /I switch can also be used on the string1==string2 form of IF. These comparisons are generic, in that if both string1 and string2 are both comprised of all numeric digits, then the strings are converted to numbers and a numeric comparison is performed.

The CMDEXTVERSION conditional works just like ERRORLEVEL, except it is comparing against an internal version number associated with the Command Extensions. The first version is 1. It will be incremented by one when significant enhancements are added to the Command Extensions. CMDEXTVERSION conditional is never true when Command Extensions are disabled.

The DEFINED conditional works just like EXISTS except it takes an environment variable name and returns true if the environment variable is defined.

%ERRORLEVEL% will expand into a string representation of the current value of ERRORLEVEL, provided that there is not already an environment variable with the name ERRORLEVEL, in which case you will get its value instead. After running a program, the following illustrates ERRORLEVEL use:

goto answer%ERRORLEVEL%
:answer0
echo Program had return code 0
:answer1
echo Program had return code 1

You can also using the numerical comparisons above: IF %ERRORLEVEL% LEQ 1 goto okay

%CMDCMDLINE% will expand into the original command line passed to CMD.EXE prior to any processing by CMD.EXE, provided that there is not already an environment variable with the name CMDCMDLINE, in which case you will get its value instead.

%CMDEXTVERSION% will expand into a string representation of the current value of CMDEXTVERSION, provided that there is not already an environment variable with the name CMDEXTVERSION, in which case you will get its value instead.

IPCONFIG

USAGE:

ipconfig [/? | /all | /renew [adapter] | /release [adapter] | /flushdns | /displaydns | /registerdns | /showclassid adapter | /setclassid adapter [classid] ]

where

Options:

The default is to display only the IP address, subnet mask and default gateway for each adapter bound to TCP/IP.

For Release and Renew, if no adapter name is specified, then the IP address leases for all adapters bound to TCP/IP will be released or renewed.

For Setclassid, if no ClassId is specified, then the ClassId is removed.

Examples:

LABEL

Availability: +Windows 2000 Professional | +Windows Server 2000

Creates, changes, or deletes the volume label of a disk.

LABEL [drive:][label]

LABEL [/MP] [volume] [label]

LOGOFF

Availability: +Windows 2000 Professional | +Windows Server 2000

Terminates a session.

LABEL [drive:][label]

MAKECAB

Cabinet Maker - Lossless Data Compression Tool

MAKECAB [/V[n]] [/D var=value ...] [/L dir] source [destination]

MAKECAB [/V[n]] [/D var=value ...] /F directive_file [...]

MD, MKDIR

Creates a directory.

MKDIR [drive:]path

MD [drive:]path

If Command Extensions are enabled MKDIR changes as follows:

MKDIR creates any intermediate directories in the path, if needed. For example, assume \a does not exist then: mkdir \a\b\c\d is the same as:

mkdir \a
chdir \a
mkdir b
chdir b
mkdir c
chdir c
mkdir d

which is what you would have to type if extensions were disabled.

MKLINK [+Server 2008|+Vista]

Creates a symbolic link.

MKLINK [[/D] | [/H] | [/J]] Link Target

MODE

Configures system devices.

Serial port:d MODE COMm[:] [BAUD=b] [PARITY=p] [DATA=d] [STOP=s] [to=on|off] [xon=on|off] [odsr=on|off] [octs=on|off] [dtr=on|off|hs] [rts=on|off|hs|tg] [idsr=on|off]

Device Status: MODE [device] [/STATUS]

Redirect printing: MODE LPTn[:]=COMm[:]

Select code page: MODE CON[:] CP SELECT=yyy

Code page status: MODE CON[:] CP [/STATUS]

Display mode: MODE CON[:] [COLS=c] [LINES=n]

Typematic rate: MODE CON[:] [RATE=r DELAY=d]

MORE

Displays output one screen at a time.

MORE [/E [/C] [/P] [/S] [/Tn] [+n]] < [drive:][path]filename

command-name | MORE [/E [/C] [/P] [/S] [/Tn] [+n]]

MORE /E [/C] [/P] [/S] [/Tn] [+n] [files]

Switches can be present in the MORE environment variable.

If extended features are enabled, the following commands are accepted at the -- More -- prompt:

MOVE

Moves files and renames files and directories.

To move one or more files: MOVE [/Y | /-Y] [drive:][path]filename1[,...] destination

To rename a directory: MOVE [/Y | /-Y] [drive:][path]dirname1 dirname2

The switch /Y may be present in the COPYCMD environment variable. This may be overridden with /-Y on the command line. Default is to prompt on overwrites unless MOVE command is being executed from within a batch script.

MSIEXEC

Windows ® Installer. V 4.5.6002.18005

msiexec /Option <Required Parameter> [Optional Parameter]

Install Options

Display Options

Restart Options

Logging Options

Update Options

Repair Options

Setting Public Properties [PROPERTY=PropertyValue]

Consult the Windows ® Installer SDK for additional documentation on the command line syntax.

Copyright ® Microsoft Corporation. All rights reserved. Portions of this software are based in part on the work of the Independent JPEG Group.

MSTSC

Remote Desktop Connection Usage

MSTSC [<connection file>] [/v:<server[:port]>] [/admin] [/f[ullscreen]] [/w:<width> /h:<height>] [/public] [/span] [/edit "connection file"] [/migrate]

NBTSTAT

Displays protocol statistics and current TCP/IP connections using NBT (NetBIOS over TCP/IP).

NBTSTAT [ [-a RemoteName] [-A IP address] [-c] [-n] [-r] [-R] [-RR] [-s] [-S] [interval] ]

NET

The syntax of this command is:

NET [ ACCOUNTS | COMPUTER | CONFIG | CONTINUE | FILE | GROUP | HELP | HELPMSG | LOCALGROUP | PAUSE | PRINT | SESSION | SHARE | START | STATISTICS | STOP | TIME | USE | USER | VIEW ]

net use

net view

NETSH

Usage: netsh [-a AliasFile] [-c Context] [-r RemoteMachine] [-u [DomainName\]UserName] [-p Password | *] [Command | -f ScriptFile]

The following commands are available:

Commands in this context:

The following sub-contexts are available:

advfirewall bridge dhcpclient firewall http interface ipsec lan nap netio p2p ras rpc wcn winhttp winsock wlan

To view help for a command, type the command, followed by a space, and then type ?.

OPENFILES

OPENFILES /parameter [arguments]

Description: Enables an administrator to list or disconnect files and folders that have been opened on a system.

Parameter List:

Examples: OPENFILES /Disconnect /? ; OPENFILES /Query /? ; OPENFILES /Local /?

PATH

Displays or sets a search path for executable files.

PATH [[drive:]path[;...][;%PATH%]

PATH ;

Type PATH ; to clear all search-path settings and direct cmd.exe to search only in the current directory.

Type PATH without parameters to display the current path.

Including %PATH% in the new path setting causes the old path to be appended to the new setting.

PAUSE

Suspends processing of a batch program and displays the message Press any key to continue . . .

PING

Usage: ping [-t] [-a] [-n count] [-l size] [-f] [-i TTL] [-v TOS] [-r count] [-s count] [[-j host-list] | [-k host-list]] [-w timeout] target_name

Options:

POPD

Changes to the directory stored by the PUSHD command.

POPD

If Command Extensions are enabled the POPD command will delete any temporary drive letter created by PUSHD when you POPD that drive off the pushed directory stack.

PRINT

Prints a text file.

PRINT [/D:device] [[drive:][path]filename[...]]

PROMPT

Changes the cmd.exe command prompt.

PROMPT [text]

Prompt can be made up of normal characters and the following special codes:

If Command Extensions are enabled the PROMPT command supports the following additional formatting characters:

PUSHD

Stores the current directory for use by the POPD command, then changes to the specified directory.

PUSHD [path | ..]

If Command Extensions are enabled the PUSHD command accepts network paths in addition to the normal drive letter and path. If a network path is specified, PUSHD will create a temporary drive letter that points to that specified network resource and then change the current drive and directory, using the newly defined drive letter. Temporary drive letters are allocated from Z: on down, using the first unused drive letter found.

QUERY

QUERY { PROCESS | SESSION | TERMSERVER | USER }

query process

Displays information about processes.

QUERY PROCESS [* | processid | username | sessionname | /ID:nn | programname] [/SERVER:servername]

query sessions

Display information about Terminal Sessions.

QUERY SESSION [sessionname | username | sessionid] [/SERVER:servername] [/MODE] [/FLOW] [/CONNECT] [/COUNTER]

query termserver

Displays the available application terminal servers on the network.

QUERY TERMSERVER [servername] [/DOMAIN:domain] [/ADDRESS] [/CONTINUE]

query user

Display information about users logged on to the system.

QUERY USER [username | sessionname | sessionid] [/SERVER:servername]

RD, RMDIR

Availability: +Windows 2000 Professional | +Windows 2000 Server

Removes (deletes) a directory.

RMDIR [/S] [/Q] [drive:]path

RD [/S] [/Q] [drive:]path

RECOVER

Recovers readable information from a bad or defective disk.

RECOVER [drive:][path]filename

Consult the online Command Reference in Windows Help before using the RECOVER command.

REG

REG operation [Parameter List]

Return Code: (Except for REG COMPARE)

For help on a specific operation type: REG Operation /?

Examples: REG QUERY /? ; REG ADD /? ; REG DELETE /? ; REG COPY /? ; REG SAVE /? ; REG RESTORE /? ; REG LOAD /? ; REG UNLOAD /? ; REG COMPARE /? ; REG EXPORT /? ; REG IMPORT /? ; REG FLAGS /?

REM

Availability: +Windows 2000 Professional | +Windows 2000 Server

Records comments (remarks) in a batch file or CONFIG.SYS.

REM [comment]

REN, RENAME

Availability: +Windows 2000 Professional | +Windows 2000 Server

Renames a file or files.

RENAME [drive:][path]filename1 filename2.

REN [drive:][path]filename1 filename2.

Note that you cannot specify a new drive or path for your destination file.

REPLACE

Availability: +Windows 2000 Professional | +Windows 2000 Server

Replaces files.

REPLACE [drive1:][path1]filename [drive2:][path2] [/A] [/P] [/R] [/W]

REPLACE [drive1:][path1]filename [drive2:][path2] [/P] [/R] [/S] [/W] [/U]

ROUTE

Availability: +Windows 2000 Professional | +Windows 2000 Server

Manipulates network routing tables.

ROUTE [-f] [-p] [-4|-6] command [destination] [MASK netmask] [gateway] [METRIC metric] [IF interface]

All symbolic names used for destination are looked up in the network database file NETWORKS. The symbolic names for gateway are looked up in the host name database file HOSTS.

If the command is PRINT or DELETE, destination or gateway can be a wildcard, (wildcard is specified as a star '*'), or the gateway argument may be omitted.

If Dest contains a * or ?, it is treated as a shell pattern, and only matching destination routes are printed. The '*' matches any string, and '?' matches any one char. Examples: 157.*.1, 157.*, 127.*, *224*.

Pattern match is only allowed in PRINT command.

Diagnostic Notes: Invalid MASK generates an error, that is when (DEST & MASK) != DEST.

Example route ADD 157.0.0.0 MASK 155.0.0.0 157.55.80.1 IF 1

The route addition failed: The specified mask parameter is invalid. (Destination & Mask) != Destination.

Examples:

route PRINT ; route PRINT -4 ; route PRINT -6 ; route PRINT 157* Only prints those matching 157*

If IF is not given, it tries to find the best interface for a given gateway.

route ADD 3ffe::/32 3ffe::1 ; route CHANGE 157.0.0.0 MASK 255.0.0.0 157.55.80.5 METRIC 2 IF 2

CHANGE is used to modify gateway and/or metric only.

route DELETE 157.0.0.0 ; route DELETE 3ffe::/32

RUNAS

Availability: +Windows 2000 Professional | +Windows 2000 Server

RUNAS USAGE:

RUNAS [ [/noprofile | /profile] [/env] [/savecred | /netonly] ] /user:<UserName> program

RUNAS [ [/noprofile | /profile] [/env] [/savecred] ] /smartcard [/user:<UserName>] program

RUNAS /trustlevel:<TrustLevel> program

Examples:

> runas /noprofile /user:mymachine\administrator cmd

> runas /profile /env /user:mydomain\admin "mmc %windir%\system32\dsa.msc"

> runas /env /user:user@domain.microsoft.com "notepad \"my File.txt\""

NOTE: Enter user's password oniy when prompted.

NOTE: /profile is not compatible with /netonly.

NOTE: /savecred is not compatible with /smartcard.

SC

DESCRIPTION: SC is a command line program used for communicating with the Service Control Manager and services.

USAGE: sc <server> [command] [service name] <option1> <option2>...

The option <server> has the form "\\ServerName"

Further help on commands can be obtained by typing: "sc [command]"

Commands:

The following commands don't require a service name: sc <server> <command> <option>

EXAMPLE: sc start MyService

Would you like to see help for the QUERY and QUERYEX commands? [ y | n ]:
y

QUERY and QUERYEX options:

If the query command is followed by a service name, the status for that service is returned. Further options do not apply in this case. If the query command is followed by nothing or one of the options listed below, the services are enumerated.

Syntax examples:

SCHTASKS

SCHTASKS /parameter [arguments]

Description: Enables an administrator to create, delete, query, change, run and end scheduled tasks on a local or remote system.

Parameter List:

Examples: SCHTASKS ; SCHTASKS /? ; SCHTASKS /Run /? ; SCHTASKS /End /? ; SCHTASKS /Create /? ; SCHTASKS /Delete /? ; SCHTASKS /Query /? ; SCHTASKS /Change /?

SET

Displays, sets, or removes cmd.exe environment variables.

SET [variable=[string]]

Type SET without parameters to display the current environment variables.

If Command Extensions are enabled SET changes as follows:

SET command invoked with just a variable name, no equal sign or value will display the value of all variables whose prefix matches the name given to the SET command. For example: SET P would display all variables that begin with the letter 'P'.

SET command will set the ERRORLEVEL to 1 if the variable name is not found in the current environment.

SET command will not allow an equal sign to be part of the name of a variable.

Two new switches have been added to the SET command:

SET /A expression

SET /P variable=[promptString]

The /A switch specifies that the string to the right of the equal sign is a numerical expression that is evaluated. The expression evaluator is pretty simple and supports the following operations, in decreasing order of precedence:

If you use any of the logical or modulus operators, you will need to enclose the expression string in quotes. Any non-numeric strings in the expression are treated as environment variable names whose values are converted to numbers before using them. If an environment variable name is specified but is not defined in the current environment, then a value of zero is used. This allows you to do arithmetic with environment variable values without having to type all those % signs to get their values. If SET /A is executed from the command line outside of a command script, then it displays the final value of the expression. The assignment operator requires an environment variable name to the left of the assignment operator. Numeric values are decimal numbers, unless prefixed by 0x for hexadecimal numbers, and 0 for octal numbers. So 0x12 is the same as 18 is the same as 022. Please note that the octal notation can be confusing: 08 and 09 are not valid numbers because 8 and 9 are not valid octal digits.

The /P switch allows you to set the value of a variable to a line of input entered by the user. Displays the specified promptString before reading the line of input. The promptString can be empty.

Environment variable substitution has been enhanced as follows:

%PATH:str1=str2% would expand the PATH environment variable, substituting each occurrence of "str1" in the expanded result with "str2". "str2" can be the empty string to effectively delete all occurrences of "str1" from the expanded output. "str1" can begin with an asterisk, in which case it will match everything from the beginning of the expanded output to the first occurrence of the remaining portion of str1.

May also specify substrings for an expansion.

%PATH:~10,5% would expand the PATH environment variable, and then use only the 5 characters that begin at the 11th (offset 10) character of the expanded result. If the length is not specified, then it defaults to the remainder of the variable value. If either number (offset or length) is negative, then the number used is the length of the environment variable value added to the offset or length specified.

%PATH:~-10% would extract the last 10 characters of the PATH variable.

%PATH:~0,-2% would extract all but the last 2 characters of the PATH variable.

Finally, support for delayed environment variable expansion has been added. This support is always disabled by default, but may be enabled/disabled via the /V command line switch to CMD.EXE. See CMD /?

Delayed environment variable expansion is useful for getting around the limitations of the current expansion which happens when a line of text is read, not when it is executed. The following example demonstrates the problem with immediate variable expansion:

set VAR=before
if "%VAR%" == "before" (
  set VAR=after
  if "%VAR%" == "after" @echo If you see this, it worked
)

would never display the message, since the %VAR% in BOTH IF statements is substituted when the first IF statement is read, since it logically includes the body of the IF, which is a compound statement. So the IF inside the compound statement is really comparing "before" with "after" which will never be equal. Similarly, the following example will not work as expected:

set LIST=
for %i in (*) do set LIST=%LIST% %i
echo %LIST%

in that it will NOT build up a list of files in the current directory, but instead will just set the LIST variable to the last file found. Again, this is because the %LIST% is expanded just once when the FOR statement is read, and at that time the LIST variable is empty. So the actual FOR loop we are executing is:

for %i in (*) do set LIST= %i which just keeps setting LIST to the last file found.

Delayed environment variable expansion allows you to use a different character (the exclamation mark) to expand environment variables at execution time. If delayed variable expansion is enabled, the above examples could be written as follows to work as intended:

set VAR=before
if "%VAR%" == "before" (
  set VAR=after
  if "!VAR!" == "after" @echo If you see this, it worked
)

set LIST=
for %i in (*) do set LIST=!LIST! %i
echo %LIST%

If Command Extensions are enabled, then there are several dynamic environment variables that can be expanded but which don't show up in the list of variables displayed by SET. These variable values are computed dynamically each time the value of the variable is expanded. If the user explicitly defines a variable with one of these names, then that definition will override the dynamic one described below:

SETLOCAL

Begins localization of environment changes in a batch file. Environment changes made after SETLOCAL has been issued are local to the batch file. ENDLOCAL must be issued to restore the previous settings. When the end of a batch script is reached, an implied ENDLOCAL is executed for any outstanding SETLOCAL commands issued by that batch script.

SETLOCAL

If Command Extensions are enabled SETLOCAL changes as follows:

SETLOCAL batch command now accepts optional arguments:

These modifications last until the matching ENDLOCAL command, regardless of their setting prior to the SETLOCAL command.

The SETLOCAL command will set the ERRORLEVEL value if given an argument. It will be zero if one of the two valid arguments is given and one otherwise. You can use this in batch scripts to determine if the extensions are available, using the following technique:

VERIFY OTHER 2>nul
SETLOCAL ENABLEEXTENSIONS
IF ERRORLEVEL 1 echo Unable to enable extensions

This works because on old versions of CMD.EXE, SETLOCAL does NOT set the ERRORLEVEL value. The VERIFY command with a bad argument initializes the ERRORLEVEL value to a non-zero value.

SETX

SetX has three ways of working:

Syntax 1: SETX [/S system [/U [domain\]user [/P [password]]]] var value [/M]

Syntax 2: SETX [/S system [/U [domain\]user [/P [password]]]] var /K regpath [/M]

Syntax 3: SETX [/S system [/U [domain\]user [/P [password]]]] /F file {var {/A x,y | /R x,y string}[/M] | /X} [/D delimiters]

Description: Creates or modifies environment variables in the user or system environment. Can set variables based on arguments, regkeys or file input.

Parameter List:

NOTE:

1) SETX writes variables to the master environment in the registry.

2) On a local system, variables created or modified by this tool will be available in future command windows but not in the current CMD.exe command window.

3) On a remote system, variables created or modified by this tool will be available at the next logon session.

4) The valid Registry Key data types are REG_DWORD, REG_EXPAND_SZ, REG_SZ, REG_MULTI_SZ.

5) Supported hives: HKEY_LOCAL_MACHINE (HKLM), HKEY_CURRENT_USER (HKCU).

6) Delimiters are case sensitive.

7) REG_DWORD values are extracted from the registry in decimal format.

Examples:

SETX MACHINE COMPAQ

SETX MACHINE "COMPAQ COMPUTER" /M

SETX MYPATH "%PATH%"

SETX MYPATH ~PATH~

SETX /S system /U user /P password MACHINE COMPAQ

SETX /S system /U user /P password MYPATH ^%PATH^%

SETX TZONE /K HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\TimeZoneInformation\StandardName

SETX BUILD /K "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\CurrentBuildNumber" /M

SETX /S system /U user /P password TZONE /K HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\TimeZoneInformation\StandardName

SETX /S system /U user /P password BUILD /K "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\CurrentBuildNumber" /M

SETX /F ipconfig.out /X

SETX IPADDR /F ipconfig.out /A 5,11

SETX OCTET1 /F ipconfig.out /A 5,3 /D "#$*."

SETX IPGATEWAY /F ipconfig.out /R 0,7 Gateway

SETX /S system /U user /P password /F c:\ipconfig.out /X

SHIFT

Changes the position of replaceable parameters in a batch file.

SHIFT [/n]

If Command Extensions are enabled the SHIFT command supports the /n switch which tells the command to start shifting at the nth argument, where n may be between zero and eight. For example: SHIFT /2 would shift %3 to %2, %4 to %3, etc. and leave %0 and %1 unaffected.

SHUTDOWN

Usage: SHUTDOWN [/i | /l | /s | /r | /g | /a | /p | /h | /e] [/f] [/m \\computer][/t xxx][/d [p|u:]xx:yy [/c "comment"]]

Reasons on this computer: (E = Expected, U = Unexpected, P = planned, C = customer defined)

SORT

SORT [/R] [/+n] [/M kilobytes] [/L locale] [/REC recordbytes] [[drive1:][path1]filename1] [/T [drive2:][path2]] [/O [drive3:][path3]filename3]

START

Starts a separate window to run a specified program or command.

START [“title”] [/D path] [/I] [/MIN] [/MAX] [/SEPARATE | /SHARED] [/LOW | /NORMAL | /HIGH | /REALTIME | /ABOVENORMAL | /BELOWNORMAL] [/AFFINITY <hex affinity>] [/WAIT] [/B] [command/program] [parameters]

NOTE: The SEPERATE and SHARED options are not supported on 64-bit platforms.

If Command Extensions are enabled, external command invocation through the command line or the START command changes as follows:

non-executable files may be invoked through their file association just by typing the name of the file as a command. (e.g. WORD.DOC would launch the application associated with the .DOC file extension). See the ASSOC and FTYPE commands for how to create these associations from within a command script.

When executing an application that is a 32-bit GUI application, CMD.EXE does not wait for the application to terminate before returning to the command prompt. This new behavior does NOT occur if executing within a command script.

When executing a command line whose first token is the string "CMD " without an extension or path qualifier, then "CMD" is replaced with the value of the COMSPEC variable. This prevents picking up CMD.EXE from the current directory.

When executing a command line whose first token does NOT contain an extension, then CMD.EXE uses the value of the PATHEXT environment variable to determine which extensions to look for and in what order. The default value for the PATHEXT variable is: .COM;.EXE;.BAT;.CMD

Notice the syntax is the same as the PATH variable, with semicolons separating the different elements.

When searching for an executable, if there is no match on any extension, then looks to see if the name matches a directory name. If it does, the START command launches the Explorer on that path. If done from the command line, it is the equivalent to doing a CD /D to that path.

SUBST

Associates a path with a drive letter.

SUBST [drive1: [drive2:]path]

SUBST drive1: /D

Type SUBST with no parameters to display a list of current virtual drives.

SYSTEMINFO

SYSTEMINFO [/S system [/U username [/P [password]]]] [/FO format] [/NH]

Description: This tool displays operating system configuration information for a local or remote machine, including service pack levels.

Parameter List:

Examples: SYSTEMINFO ; SYSTEMINFO /? ; SYSTEMINFO /S system ; SYSTEMINFO /S system /U user ;

SYSTEMINFO /S system /U domain\user /P password /FO TABLE ; SYSTEMINFO /S system /FO LIST ; SYSTEMINFO /S system /FO CSV /NH

TAKEOWN (V+)

TAKEOWN [/S system [/U username [/P [password]]]] /F filename [/A] [/R [/D prompt]]

Description: This tool allows an administrator to recover access to a file that was denied by re-assigning file ownership.

Parameter List:

NOTE:

1) If /A is not specified, file ownership will be given to the current logged on user.

2) Mixed patterns using "?" and "*" are not supported.

3) /D is used to suppress the confirmation prompt.

Examples:

TAKEOWN /?

TAKEOWN /F lostfile

TAKEOWN /F \\system\share\lostfile /A

TAKEOWN /F directory /R /D N

TAKEOWN /F directory /R /A

TAKEOWN /F *

TAKEOWN /F C:\Windows\System32\acme.exe

TAKEOWN /F %windir%\*.txt

TAKEOWN /S system /F MyShare\Acme*.doc

TAKEOWN /S system /U user /F MyShare\foo.dll

TAKEOWN /S system /U domain\user /P password /F share\filename

TAKEOWN /S system /U user /P password /F Doc\Report.doc /A

TAKEOWN /S system /U user /P password /F Myshare\*

TAKEOWN /S system /U user /P password /F Home\Logon /R

TAKEOWN /S system /U user /P password /F Myshare\directory /R /A

TASKKILL

TASKKILL [/S system [/U username [/P [password]]]] { [/FI filter] [/PID processid | /IM imagename] } [/T] [/F]

Description: This tool is used to terminate tasks by process id (PID) or image name.

Parameter List:

Filters:

NOTE

1) Wildcard '*' for /IM switch is accepted only when a filter is applied.

2) Termination of remote processes will always be done forcefully (/F).

3) "WINDOWTITLE" and "STATUS" filters are not considered when a remote machine is specified.

Examples: TASKKILL /IM notepad.exe ; TASKKILL /PID 1230 /PID 1241 /PID 1253 /T ; TASKKILL /F /IM cmd.exe /T ;

TASKKILL /F /FI "PID ge 1000" /FI "WINDOWTITLE ne untitle*" ; TASKKILL /F /FI "USERNAME eq NT AUTHORITY\SYSTEM" /IM notepad.exe ;

TASKKILL /S system /U domain\username /FI "USERNAME ne NT*" /IM * ; TASKKILL /S system /U username /P password /FI "IMAGENAME eq note*"

TASKLIST

TASKLIST [/S system [/U username [/P [password]]]] [/M [module] | /SVC | /V] [/FI filter] [/FO format] [/NH]

Description: This tool displays a list of currently running processes on either a local or remote machine.

Parameter List:

Filters:

NOTE: "WINDOWTITLE" and "STATUS" filters are not supported when querying a remote machine.

Examples: TASKLIST ; TASKLIST /M ; TASKLIST /V /FO CSV ; TASKLIST /SVC /FO LIST

TASKLIST /M wbem* ; TASKLIST /S system /FO LIST ; TASKLIST /S system /U domain\username /FO CSV /NH ;

TASKLIST /S system /U username /P password /FO TABLE /NH ; TASKLIST /FI "USERNAME ne NT AUTHORITY\SYSTEM" /FI "STATUS eq running"

TIME

Displays or sets the system time.

TIME [/T | time]

Type TIME with no parameters to display the current time setting and a prompt for a new one. Press ENTER to keep the same time.

If Command Extensions are enabled the TIME command supports the /T switch which tells the command to just output the current time, without prompting for a new time.

TIMEOUT (V+)

TIMEOUT [/T] timeout [/NOBREAK]

Description: This utility accepts a timeout parameter to wait for the specified time period (in seconds) or until any key is pressed. It also accepts a parameter to ignore the key press.

Parameter List:

NOTE: A timeout value of -1 means to wait indefinitely for a key press.

Examples: TIMEOUT /? ; TIMEOUT /T 10 ; TIMEOUT /T 300 /NOBREAK ; TIMEOUT /T -1

TITLE

Sets the window title for the command prompt window.

TITLE [string]

TRACERT

Usage: tracert [-d] [-h maximum_hops] [-j host-list] [-w timeout] target_name

Options:

TREE

Graphically displays the folder structure of a drive or path.

TREE [drive:][path] [/F] [/A]

TYPE

Displays the contents of a text file or files.

TYPE [drive:][path]filename

VER

Availability: +Windows 2000 Professional | +Windows 2000 Server

Displays the Windows version.

VER

VERIFY

Availability: +Windows 2000 Professional | +Windows 2000 Server

Tells cmd.exe whether to verify that your files are written correctly to a disk.

VERIFY [ON | OFF]

Type VERIFY without a parameter to display the current VERIFY setting.

VOL

Availability: +Windows 2000 Professional | +Windows 2000 Server

Displays the disk volume label and serial number, if they exist.

VOL [drive:]

W32TM

w32tm [/? | /register | /unregister ]

w32tm /monitor [/domain:<domain name>] [/computers:<name>[,<name>[,<name>...]]] [/threads:<num>] [/ipprotocol:<4|6>] [/nowarn]

w32tm /ntte <NT time epoch>

Convert a NT system time, in (10^-7)s intervals from 0h 1-Jan 1601, into a readable format.

w32tm /ntpte <NTP time epoch>

Convert an NTP time, in (2^-32)s intervals from 0h 1-Jan 1900, into a readable format.

w32tm /resync [/computer:<computer>] [/nowait] [/rediscover] [/soft]

Tell a computer that it should resynchronize its clock as soon as possible, throwing out all accumulated error statistics.

w32tm /stripchart /computer:<target> [/period:<refresh>] [/dataonly] [/samples:<count>] [/packetinfo] [/ipprotocol:<4|6>]

Display a strip chart of the offset between this computer and another computer.

w32tm /config [/computer:<target>] [/update] [/manualpeerlist:<peers>] [/syncfromflags:<source>] [/LocalClockDispersion:<seconds>] [/reliable:(YES|NO)] [/largephaseoffset:<milliseconds>]

w32tm /tz

Display the current time zone settings.

w32tm /dumpreg [/subkey:<key>] [/computer:<target>]

Display the values associated with a given registry key. The default key is HKLM\System\CurrentControlSet\Services\W32Time (the root key for the time service).

w32tm /query [/computer:<target>] {/source | /configuration | /peers | /status} [/verbose]

Display a computer's windows time service information.

w32tm /debug {/disable | {/enable /file:<name> /size:<bytes> /entries:<value> [/truncate]}}

Enable or disable local computer windows time service private log.

WHERE [+Server 2003|+XP]

WHERE [/R dir] [/Q] [/F] [/T] pattern...

Description: Displays the location of files that match the search pattern. By default, the search is done along the current directory and in the paths specified by the PATH environment variable.

Parameter List:

NOTE: The tool returns an error level of 0 if the search is successful, of 1 if the search is unsuccessful and of 2 for failures or errors.

Examples: WHERE /? ; WHERE myfilename1 myfile????.* ; WHERE $windir:*.* ; WHERE /R c:\windows *.exe *.dll *.bat ; WHERE /Q ??.??? ;

WHERE "c:\windows;c:\windows\system32:*.dll" ; WHERE /F /T *.dll

WHOAMI

WhoAmI has three ways of working:

Syntax 1: WHOAMI [/UPN | /FQDN | /LOGONID]

Syntax 2: WHOAMI { [/USER] [/GROUPS] [/PRIV] } [/FO format] [/NH]

Syntax 3: WHOAMI /ALL [/FO format] [/NH]

Description: This utility can be used to get user name and group information along with the respective security identifiers (SID), privileges, logon identifier (logon ID) for the current user (access token) on the local system. i.e. who is the current logged on user? If no switch is specified, tool displays the user name in NTLM format (domain\username).

Parameter List:

Examples: WHOAMI ; WHOAMI /? ;

WHOAMI /UPN ; WHOAMI /FQDN ; WHOAMI /LOGONID ; WHOAMI /USER ; WHOAMI /USER /FO LIST ; WHOAMI /USER /FO CSV ; WHOAMI /GROUPS ; WHOAMI /GROUPS /FO CSV /NH

WHOAMI /PRIV ; WHOAMI /PRIV /FO TABLE ; WHOAMI /USER /GROUPS ; WHOAMI /USER /GROUPS /PRIV ; WHOAMI /ALL ; WHOAMI /ALL /FO LIST ; WHOAMI /ALL /FO CSV /NH

WMIC

[Availability: +Windows XP Professional | +Windows Server 2003]

[global switches] <command>

The following global switches are available:

For more information on a specific global switch, type: switch-name /?

The following alias/es are available in the current role:

For more information on a specific alias, type: alias /?

For more information on CLASS/PATH/CONTEXT, type: (CLASS | PATH | CONTEXT) /?