112 ms·
> Why the help viewer does anything as NT AUTHORITY\SYSTEM is beyond me. I don't think it does. The report states that they achieved execution as NT AUTHORITY\
by DHowett 4y ago
> Why the help viewer does anything as NT AUTHORITY\SYSTEM is beyond me.
I don't think it does. The report states that they achieved execution as NT AUTHORITY\SYSTEM using psexec from "SysInternals"; arguably, running something as SYSTEM is psexec's entire purpose, but it does require the installation of a service that runs as SYSTEM and brokers execution.