Thanks!

Honestly can't tell

UAC- the design is very human

It doesn't break anything to add privileges. It's only a security risk.

they say it does. the consequences have yet to reveal themselves to me

Windows permissions are more flexible than basic Unix ones. A file doesn't just have an owner and a group, it can have individual permissions for arbitrarily many entities, so taking ownership doesn't remove any of the permissions from anything that already had access, it just adds more. The command shown here is closest in effect to deciding you're always going to log in as root from now on, although Windows has a way to effectively do that without modifying the ACL of every file. Either way, it's silly, and usually people who suggest it are under the impression that XP did permissions right by not meaningfully enforcing them and not having an equivalent of a root account you can temporarily switch to, and Vista only changed things specifically to annoy people, and not to be more like Unix.

honestly if I install a malware at this point I kind of deserve what happens.

FR, like I know why Microsoft started wrestling away control from end users but dammit I NEED those priveledges for myself

Edit: I was scrolling back up and realized I responded to the wrong person about the psexec thing. I apologize for any misunderstanding (I'm gonna leave it because its still kind of good info in there and I suck at typing on mobile).

I'm not a fan of psexec anymore, in a lot of environments is blocked or gets picked up by overzealous AV. Might I suggest using using something like NTObjectManager to just spawn a child process of TrustedInstaller?

It works really well, I've never seen it flagged by AV, and it's nice being able to remove shit that system can't. One thing I had a hard time getting away from PSExec for was remote sessions when remote management was turned off. Thankfully you can just invoke-command to call cmd and enable WinRM remotely... Goddamn I hate Windows but love the simplicity to utilized it's "under documented" features.

That looks like it would only grant a system level cmd prompt. TrustedInstaller has a bit more access.

sheesh, all in one go? I can't get through 1 tb with it even before I start doing hairbrained shit like in my post. on a private machine, with 16gb. I assume that system is on 11?