code:

---

	$destdir="\\$name\c$$\Winnt"
	copy "$tools\rcmdsvc.exe" "$destdir"
	shell "cmd /c $tools\xnet.exe INSTALL \\$name\Rcmd /b:C:\WINNT\rcmdsvc.EXE /u:@domain\@userid /p:$password"
	shell "cmd /c $tools\xnet.exe start \\$name\Rcmd"
	shell "cmd /c $tools\rcmd.exe \\$name net use $dl: $svrpath"
	shell "cmd /c $tools\xnet.exe stop \\$name\Rcmd"
	shell "cmd /c $tools\xnet.exe remove  \\$name\Rcmd /y"
	del "$destdir\rcmdsvc.exe"

---

quote:

---

Service installed successfully.

Starting Rcmd
Request completed successfully.
Error - Failed to connect to <\\wheelerc_2nd>, system not found or service not a
ctive
Stopping Rcmd
Stopping the service failed...[1062 / service not active]

Service successfully removed.

---

code:

---

running          RemoteCmd                        Remote Command Server

---

code:

---

 	$dl="q"
	$svrpath="\\server\shared"
	$tools="\\server\logon\tools"
	use "\\$name\ipc$$"
	$targetSystemRoot = readvalue("\\$name\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\","SystemRoot")
	shell '%comspec% /c $tools\xnet list $target | find /i "rcmdsvc" > nul'
	if @error = 0
		shell '%comspec% /c $tools\xnet stop \\$name\rcmdsvc > nul'
		shell '%comspec% /c $tools\xnet remove \\$name\rcmdsvc /y > nul'
		endif
	copy "$tools\rcmd*.exe" "\\$name\admin$$\system32"
	if @error <> 0 	exit(@error)	 endif
	shell '%comspec% /c $tools\xnet install \\$name\rcmdsvc /b:$targetsystemroot\system32\rcmdsvc.exe /n:"Remote Command Service" /u:localsystem /i:y /s:auto > nul'
	shell '%comspec% /c $tools\xnet start \\$name\rcmdsvc > nul'
	shell '%comspec% /c $tools\rcmd.exe \\$name net use $dl: $svrpath'
	shell '%comspec% /c $tools\xnet stop \\$name\rcmdsvc > nul'
	shell '%comspec% /c $tools\xnet remove \\$name\rcmdsvc /y > nul'
	del "$destdir\rcmdsvc.exe"
	use "$target\ipc$$" /delete 

---

code:

---

 C:\>soon \\client 61 /interactive "cmd /c net use q: \\server\shared" 

---

code:

---

[HKEY_CURRENT_USER\Network\O]
"RemotePath"="\\\\server\\share"
"UserName"=""
"ProviderName"="Microsoft Windows Network"
"ProviderType"=dword:00020000
"ConnectionType"=dword:00000001

---

code:

---

Function MapDrive
	$index=0
	:sidloop
	$sid=enumkey("\\$name\hkey_users\",$index)
	if not @error and not instr($sids,"_")
		$HKUsidSMWCVE = "HKEY_USERS\$sid\Software\Microsoft\Windows\CurrentVersion\Explorer"
		$LogonName=readvalue("\\$name\$HKUsidSMWCVE","Logon User Name")
		if not $remoteuser="@domain\$LogonName"
			$index=$index+1
			$sid=''
			goto sidloop
			endif
		endif
	if $sid
		$letter="q"
		$newpath="\\wheelerc\shared"
		$=writevalue("\\$name\HKEY_USERS\$sid\Network\$letter","RemotePath","$newpath",REG_SZ)
		$=writevalue("\\$name\HKEY_USERS\$sid\Network\$letter","UserName","",REG_SZ)
		$=writevalue("\\$name\HKEY_USERS\$sid\Network\$letter","ProviderName","Microsoft Windows Network",REG_SZ)
		$=writevalue("\\$name\HKEY_USERS\$sid\Network\$letter","ProviderType","131072",REG_Dword)
		$=writevalue("\\$name\HKEY_USERS\$sid\Network\$letter","ConnectionType","00000001",REG_Dword)
		endif
	GetDrives()
	endfunction
  

---

code:

---

 Function RemoteSid($computer, $remoteusername)
	dim $sid, $logonname, $index, $HKUsidSMWCVE
	$index=0
	:sidloop
	$sid=enumkey("\\$computer\hkey_users\",$index)
	if not @error and not instr($sid,"_")
		$HKUsidSMWCVE = "HKEY_USERS\$sid\Software\Microsoft\Windows\CurrentVersion\Explorer"
		$LogonName=readvalue("\\$computer\$HKUsidSMWCVE","Logon User Name")
		if $remoteusername=$LogonName
			$RemoteSid=$sid
			exit 0
			return
		else 
			$index=$index+1
			$sid=''
			exit 1
			goto sidloop
			endif
		endif
	endfunction 

---