PsTools from Sysinternals is one of the most powerful and versatile packages for managing Windows computers, both local and remote.This collection of tools created by Mark Russinovich facilitates advanced management from the command line, without the need to install additional software on the computers we want to manage.
Although the PsTools suite has been on the market for years, it continues to be updated and used by system administrators. in business and home environments. Thanks to its simplicity, lightness, and power, it's possible to execute commands, obtain system information, manage services and users, or even shut down and restart computers remotely without complications.
What is PsTools and who developed it?
PsTools was developed by Mark Russinovich, founder of Sysinternals, a company that with There was acquired by Microsoft. Originally designed for Windows NT and 2000, the tools remain fully supported in modern versions like Windows 10, 11, and Server.
Its name comes from the prefix “Ps”, in allusion to the command “ps” of UNIX, and All the included tools are designed to perform administrative tasks both on local and remote computers, without requiring additional installation on the target systems.
Tools included in the PsTools suite
The PsTools package contains a complete collection of command-line executable utilities. Each one performs specific functions for the diagnosis, administration or automation of tasks. in Windows environments. Below are the details of each:
- PsExec: Run processes on remote computers as if they were local. It's the most powerful tool in the suite due to its flexibility.
- PSFile: Displays files opened remotely on a system.
- PsGetSid: Extracts the SID (Security Identifier) of a user or computer.
- PsInfo: Provides system data such as Windows version, RAM, Uptime, etc.
- PsKill: Kill specific processes by name or PID.
- PsList: Details all running processes and their status.
- PsLoggedOn: Reports users connected locally or via shared resources.
- PsLogList: Extracts and displays system event logs.
- PsPasswd: Change user account passwords.
- PsService: Controls Windows services (start, stop, query status).
- PsShutdown: Allows you to remotely shut down, restart, or suspend a computer.
- PsSuspend: Temporarily pauses a process.
- PsPing: Measures network performance and latency between devices.
- PsUptime: Displays the time a system has been on (now integrated into PsInfo).
Requirements and compatibility
PsTools does not need installation as such. Simply unzip the downloaded package into a specific folder. It is recommended to add this folder to your system PATH (for example, C:\Windows\PsTools) to be able to use the tools from any location in the terminal.
Compatibility:
- Client: Windows 8.1 and higher.
- Server: Windows Server 2012 and later.
- Also compatible with Nano Server since 2016.
The latest version of the package (as of April 2023) is just 5 MB in size and can be downloaded directly from the official Microsoft Learn website.
How to Use PsExec: The Most Versatile Tool
PsExec is undoubtedly the jewel in the crown of the PsTools suite. Allows you to run commands or programs on remote computers with great flexibility, including starting interactive shells or running processes with system privileges.
Basic example:
psexec \\equipo_remoto cmd – Start a symbol of the system on the remote computer.
Run a remote program:
psexec \\equipo_remoto -c programa.exe – Copy and run the program on the target computer.
Additional useful commands:
-i– Run the program by interacting with the remote desktop.-s– Run under the system account.-u usuario -p contraseña– Log in using other credentials.-d– Do not wait for the launched process to finish (non-interactive mode).-h– Run with elevated privileges if available.
PsExec encrypts the password and command during transmission, although it is recommended to use it on trusted networks or secure tunnels.
Tips for properly configuring PsTools
A good practice is to add the PsTools folder to the PATH environment variableThis allows you to invoke any of the tools from any location without having to manually navigate to the installation folder.
Steps:
- Download PsTools and unzip the contents in
C:\Windows\PsToolsor a folder of your choice. - Go to Control Panel → System and Security → System → Advanced system settings.
- Click Environment Variables and edit the PATH variable.
- Add the path where the executables are (for example,
C:\Windows\PsTools).
After this you can open a CMD terminal or PowerShell and use any PsTools tool without difficulty.
Practical use cases
System administrators, support technicians, and IT professionals use PsTools to:
- Automate scheduled server reboots with PsShutdown.
- Audit actions of logged-in users using PsLoggedOn.
- Monitor processes in production with PsList.
- Update configurations by running remote scripts with PsExec.
- Check for network problems with PsPing.
They are also useful tools for recovery scenarios, such as running regedit as SYSTEM to modify protected keys or emergency scripts.
Advantages over other solutions
PsTools has a great advantage over solutions like Telnet, SSH or commercial suites like pcAnywhere: no additional components needed.
Furthermore:
- No client software required on the remote computer.
- No installation required. Just copy and run.
- Allows full control from the console, ideal for automation via scripts.
- The tools are lightweight, portable and easy to use.
Security considerations
Several PsTools tools have been used by malware and system administrators for questionable purposes, leading to Some antiviruses identify them as remote administration tools (RAT)This does not mean that they contain viruses, but rather that their behavior can be exploited to compromise systems when used incorrectly.
It is important to use them with caution and under authorization.. Use PsTools only in environments under your control or with express authorization, and never on unprotected public networks.
A thorough understanding of how PsTools works and the utilities it includes allows you to take full advantage of its potential to manage Windows environments much more efficiently. From executing remote commands or processes to managing services, analyzing logs, or monitoring network status, this kit remains an essential tool for any administrator or technician looking to automate and simplify their daily work.
Passionate writer about the world of bytes and technology in general. I love sharing my knowledge through writing, and that's what I'll do on this blog, show you all the most interesting things about gadgets, software, hardware, tech trends, and more. My goal is to help you navigate the digital world in a simple and entertaining way.