{
	"id": "cad40f1a-e895-474b-93a3-f2388545798c",
	"created_at": "2026-04-06T00:14:40.019687Z",
	"updated_at": "2026-04-10T13:12:34.799389Z",
	"deleted_at": null,
	"sha1_hash": "28c1bfd1ff773c7d15f3b31e9b5b8c7ddafd23a8",
	"title": "Net.exe reference.",
	"llm_title": "",
	"authors": "",
	"file_creation_date": "0001-01-01T00:00:00Z",
	"file_modification_date": "0001-01-01T00:00:00Z",
	"file_size": 46046,
	"plain_text": "Net.exe reference.\r\nBy John Savill\r\nArchived: 2026-04-05 20:41:19 UTC\r\nA. Below is a summary of all the net.exe usage methods.\r\nnet accounts\r\nUsed to modify user accounts. Specified on its own will give information about the current logon.\r\nOptions:\r\n/forcelogoff:\u003cminutes or no\u003e\r\nMinutes until the user gets logged off after logon hours expire. No means a\r\nforced logoff will not occur\r\n/lockoutthreshold:\u003cnumber\r\nof failed attempts\u003e\r\nThis parameter allows you to configure the number of failed logon attempts\r\nbefore the account is locked. The range is 1 to 999.\r\n/lockoutduration:\u003cminutes\u003e \r\nThis parameter specifies the number of minutes accounts remain locked\r\nbefore automatically becoming unlocked. The range is 1 to 99999.\r\n/lockoutwindow:\u003cminutes\u003e \r\n This parameter lets you configure the maximum number of minutes\r\nbetween two consecutive failed logon attempts before an account is locked.\r\nThe range is 1 to 99999.\r\n/minpwlen:\u003clength\u003e\r\nMinimum number of characters for the password. Default is 6, valid range is\r\nbetween 0 and 14\r\n/maxpwage:\u003cdays\u003e\r\nMaximum number of days a password is valid. Default is 90, valid range is\r\nbetween 0 and 49710\r\n/minpwage:\u003cdays\u003e\r\nNumber of days that must occur before the password can be changed.\r\nDefault is 0, valid range is between 0 and maxpwage\r\n/uniquepw:\u003cnumber\u003e Password may not be reused for number attempts\r\n/sync Forces a domain sync\r\n/domain Performs any of the above actions on the domain controller\r\nnet computer\r\nUsed to add and remove computer accounts from the domain.\r\nOptions:\r\nhttps://web.archive.org/web/20150511162820/http://windowsitpro.com/windows/netexe-reference\r\nPage 1 of 7\n\n\\\\\u003ccomputer name\u003e Name of the computer to be added or removed\r\n/add Add the specified computer\r\n/del Removes the specified computer\r\nnet config server\r\nAllows modifications to the server service. Entered with no parameters give details of the current configuration\r\nOptions:\r\n/autodisconnect:\r\n\u003cminutes\u003e\r\nNumber of minutes an account may be inactive before disconnection. Default is 15,\r\nvalid range between 1 and 65535. -1 means never disconnected.\r\n/srvcomment:\"text\" Set the comment for the machine\r\n/hidden:\u003cyes or no\u003e Specified is the computer is hidden in the listing of computers\r\nnet config workstation\r\nAllows modifications to the workstation service. Entered with no parameters give details of the current\r\nconfiguration\r\nOptions:\r\n/charcount:\r\n\u003cbytes\u003e\r\nNumber of bytes to be collected before data is sent. The default is 16, valid range is\r\nbetween 0 and 65535.\r\n/chartime:\r\n\u003cmsec\u003e\r\nNumber of milliseconds NT waits before sending data. If charcount is also set whichever\r\nis satisfied first is used. Default is 250, valid range is between 0 and 65535000.\r\n/charwait:\r\n\u003cseconds\u003e\r\nNumber of seconds NT waits for a communications device to become available. Default is\r\n3600, valid is between 0 and 65535.\r\nnet continue \u003cservice name\u003e\r\nRestarts the specified paused service.\r\nnet file\r\nLists any files that are open/locked via a network share.\r\nOptions:\r\nid Identification of the file (given by entering net file on its own)\r\n/close Close the specified lock\r\nhttps://web.archive.org/web/20150511162820/http://windowsitpro.com/windows/netexe-reference\r\nPage 2 of 7\n\nSee Q. How can I tell who has which files open on a machine? for more details.\r\nnet group\r\nAdds/modifies global groups on servers. Without parameters will list global groups.\r\nSyntax:\r\nnet group \u003cgroup name\u003e \\[/command:\"\u003ctext\u003e\"\\] \\[/domain\\]\r\nnet group \u003cgroup name\u003e \\[/add \\[/comment:\"\u003ctext\u003e\"\\] or /delete\\] \\[/domain\\]\r\nnet group \u003cgroup name\u003e \u003cuser name\u003e /add or /delete \\[/domain\\]\r\nOptions:\r\ngroupname Name of the global group\r\n/comment:\"\u003ctext\u003e\" Comment if a new global group is created. Up to 48 characters\r\n/domain Performs the function on the primary domain controller\r\nusername Username to which apply the operation\r\n/add Adds the specified user to the group or the group to the domain\r\n/delete Removes a group from a domain or a user from a group\r\nnet localgroup\r\nPerforms actions on local groups. Same parameters as net group.\r\nnet name\r\nAdds/removes a name to which messaging may be directed to. Running the command on its own will list all\r\nmessaging names eligible on the machine.\r\nOptions:\r\nname The messaging name to be added/removed\r\n/add Add the name\r\n/delete Remove the name\r\nnet pause \u003cservice name\u003e\r\nUsed to pause a service from the command line.\r\nnet print\r\nUsed to list/modify print jobs.\r\nhttps://web.archive.org/web/20150511162820/http://windowsitpro.com/windows/netexe-reference\r\nPage 3 of 7\n\nOptions:\r\n\\\\computername Indicates the computer that hosts the printer queue\r\nsharename Name of the printer queue\r\njob The job number to modify\r\n/hold Pauses a job on the print queue\r\n/release Removes the hold status of a job on the print queue\r\n/delete Deletes a job off of the print queue\r\nnet send\r\nSends a message to a computer, user or messaging name.\r\nOptions:\r\nname\r\nName of the user, computer or messaging name. Can also use * to send to everyone\r\nin the group\r\n/domain:\u003cdomain\r\nname\u003e\r\nAll users in the current domain or the specified domain\r\n/users To all users connected to the server\r\nmessage The message to send\r\nnet session\r\nLists or disconnects sessions. Used with no options lists the current sessions.\r\nOptions:\r\n\\\\\u003ccomputer\r\nname\u003e\r\nThe computer of whose session to close\r\n/delete\r\nCloses the session to the computer specified. Omitting a computer name will close all\r\nsessions\r\nnet share\r\nUsed to manage shares from the command line.\r\nSyntax:\r\nhttps://web.archive.org/web/20150511162820/http://windowsitpro.com/windows/netexe-reference\r\nPage 4 of 7\n\nnet share \u003csharename\u003e=\u003cdrive\u003e:\\\u003cdirectory\u003e \\[/users=\u003cnumber\u003e or /unlimited\\] \\[/remark:\"text\"\\]\r\nnet share \u003csharename\u003e \\[/users=\u003cnumber\u003e or /unlimited\\] \\[/remark:\"text\"\\]\r\nnet share \u003csharename or device name or drive and path\u003e /delete\r\nOptions:\r\n\u003csharename\u003e Name of the share\r\n\u003cdevice name\u003e Used to specify the printer name if specifying a printer share\r\n\u003cdrive\u003e:\u003cpath\u003e Absolute path\r\n/users:\u003cnumber\u003e Number of simultaneous connections to the share\r\n/unlimited Unlimited usage\r\n/remark:\"\u003ctext\u003e\" Comment for the share\r\n/delete Delete the specifed share\r\nnet start \u003cservice name\u003e\r\nStart the specified service\r\nnet statistics \\[workstation or service\\]\r\nGives information about either the server or workstation service.\r\nnet stop \u003cservice name\u003e\r\nStops the specified service\r\nnet time\r\nUsed to synchronize the time of a computer.\r\nOptions:\r\n\\\\\u003ccomputer name\u003e The name of the computer to which synchronize the time\r\n/domain:\u003cdomain\u003e Synchronize the time with the specified domain\r\n/set Sets the time\r\nnet use\r\nConnects or disconnects to a network share. Used with no qualifiers lists the current network mappings.\r\nSyntax:\r\nhttps://web.archive.org/web/20150511162820/http://windowsitpro.com/windows/netexe-reference\r\nPage 5 of 7\n\nnet use \u003cdevice name\u003e or * \\\\\u003ccomputer name\u003e\\\u003cshare name\u003e \\[password or *\\] \\[/user:\\[domain\\user\\] /delete or\r\n\\[persistent:\\[yes or no\\]\\]\r\nnet use \u003cdevice name\u003e /home /delete or /persistent:\\[yes or no\\]\r\nOptions:\r\n\u003cdevice name\u003e Name of the device to map to. Use * to use the next available device name\r\n\\\\computer name The name of the computer controlling the resource\r\n\\sharename Name of the share\r\n\\volume Name of the volume if on a NetWare server\r\npassword Password to which to map\r\n* Gives a prompt to which to enter the password\r\n/user:\u003cdomain\u003e\\\u003cuser\u003e Specifies the user to connect as\r\n/home Connects to a users home directory\r\n/delete Closes a connection\r\n/persistent:\\[yes or no\u003e Sets if the connection should be reconnected at next logon\r\nnet user\r\nUsed to add/create/modify user accounts\r\nSyntax:\r\nnet user \u003cusername\u003e \\[password or *\\] \\[/add\\] \\[options\\] \\[/domain\\]\r\nnet user \u003cusername\\] /delete /domain\r\nusername The name of the account\r\npassword Assigns or changes a password\r\n* Gives a prompt for the password\r\n/domain perform on a domain\r\n/add Creates the account\r\n/delete Removes the account\r\n/active:\\[yes or no\\] Activates or deactivates the account\r\n/comment:\"\u003ctext\u003e\" Adds a descriptive comment\r\nhttps://web.archive.org/web/20150511162820/http://windowsitpro.com/windows/netexe-reference\r\nPage 6 of 7\n\n/counterycode.nnn\r\nnnn is the number operating system code. Use 0 for the operating systems\r\ndefault\r\n/expires:\u003cdate or never\u003e\r\nThe expiry date of the account. Date format is mm,dd,yy or dd,mm,yy which\r\nis determined by the country code\r\n/fullname:\"\u003cname\u003e\" The full name of the account\r\n/homedir:\u003cpath\u003e Path for the users home directory\r\n/passwordchg:\\[yes or no\\] Used to specify if the user can modify the password\r\n/passwordreq:\\[yes or no\\] Used to determine if the account needs a password\r\n/profilepath:\u003cpath\u003e Used to specify the profile path\r\n/scriptpath:\u003cpath\u003e Path of the logon script\r\n/times:\u003ctimes or all\u003e Hours user may logon\r\n/usercomment:\"\u003ctext\u003e\" A comment for the account\r\n/workstations:\u003cmachine\r\nnames\u003e\r\nNames the user may logon to. * means all.\r\nnet view\r\nLists shared resources on a domain. Used with no parameters lists all machine accounts in a domain.\r\nOptions:\r\n\\\\computer name Specifies the computer whose resource should be viewed\r\n/domain:\u003cdomain name\u003e The domain to be used\r\n/network:\u003cNetWare network\u003e A NetWare network to be used\r\nSource: https://web.archive.org/web/20150511162820/http://windowsitpro.com/windows/netexe-reference\r\nhttps://web.archive.org/web/20150511162820/http://windowsitpro.com/windows/netexe-reference\r\nPage 7 of 7",
	"extraction_quality": 1,
	"language": "EN",
	"sources": [
		"MITRE"
	],
	"origins": [
		"web"
	],
	"references": [
		"https://web.archive.org/web/20150511162820/http://windowsitpro.com/windows/netexe-reference"
	],
	"report_names": [
		"netexe-reference"
	],
	"threat_actors": [],
	"ts_created_at": 1775434480,
	"ts_updated_at": 1775826754,
	"ts_creation_date": 0,
	"ts_modification_date": 0,
	"files": {
		"pdf": "https://archive.orkl.eu/28c1bfd1ff773c7d15f3b31e9b5b8c7ddafd23a8.pdf",
		"text": "https://archive.orkl.eu/28c1bfd1ff773c7d15f3b31e9b5b8c7ddafd23a8.txt",
		"img": "https://archive.orkl.eu/28c1bfd1ff773c7d15f3b31e9b5b8c7ddafd23a8.jpg"
	}
}