A curated list of useful hidden commands for Windows power users, IT professionals, and enthusiasts.
| Command | Purpose | Notes / Example |
|---|
mountvol /r | Reset stale volume mount points | Removes old USB history and orphaned volume GUIDs; useful for eliminating false “Scan and Fix” prompts. |
diskpart | Disk partition management | Use list disk, select disk, clean to manage partitions. |
fsutil dirty query X: | Check if volume X: has the dirty bit set | Requires admin rights. Use chkdsk u: /f to essentially cause fsutil dirty clear U: (there is not such cmd). |
chkdsk | Check and repair filesystem | /f fixes errors, /r locates bad sectors. |
robocopy | Robust file copy and mirroring | Preserves timestamps and retries automatically. |
vssadmin | Manage Volume Shadow Copies | Useful for creating or listing snapshots. Ex. vssadmin list shadows (notice vssadmin doesn't use Unix-style switches with a leading -. Its syntax is command-oriented. |
defrag | Optimize disks | /C defrags all volumes, /X consolidates free space. |
| Command | Purpose | Notes / Example |
|---|
ipconfig /all | View detailed IP configuration | Use /release and /renew for DHCP changes. |
netstat /ano | View active network connections | Shows process IDs of each connection. |
arp -a | Show ARP table | Good for local network troubleshooting. |
nslookup | DNS query tool | Test name resolution. |
tracert | Trace route to a host | Shows hop-by-hop latency. |
lusrmgr | List users and groups when Windows 11 is NOT pro version | Usually stored in root of C:. |
wmic nic where "NetEnabled=true" get Name,Speed | Connection Speed Test | What speed was negotiated. |
netplwiz | List users | Del those not wanted. |
| Command | Purpose | Notes / Example |
|---|
reg query | Read registry keys | Example: reg query HKLM\SYSTEM\CurrentControlSet\Control\Session Manager |
reg add | Add registry keys | Can script configuration changes. |
reg delete | Delete registry keys | Always back up first! |
wmic memorychip get banklabel, capacity, speed | Delete registry keys | Always back up first! |
findstr /c:"error" %windir%\logs\cbs\cbs.log | Find errors in CBS log files | CBS log files are huge by default. |
bcdedit | Manage boot configuration | Change default OS, safe mode options, etc. |
DRIVERQUERY /FO CSV /SI >temp2.txt DRIVERQUERY /FO CSV /V >temp.txt | Find driver filename for Signed and UnSigned drivers | Try DRIVERQUERY /?. |
| Command | Purpose | Notes / Example |
|---|
fsutil reparsepoint query <path> | Inspect junctions/symlinks | Advanced filesystem analysis. |
cipher /w:X: | Wipe free space securely | Does not touch existing files. |
takeown /f <file> | Take ownership of a file/folder | Useful for locked files. |
icacls | Manage permissions | Grant, remove, save ACLs. |
powercfg /batteryreport | Generates a detailed battery report | Battery life report saved to file path C:\bat\battery-report.html. |
powercfg /energy | Generate power efficiency report | Checks system for energy waste. |
wevtutil | Manage Event Logs | Export, clear, or query logs. |
| Command | Purpose | Notes / Example |
|---|
schtasks | Schedule tasks from CLI | Automate scripts and maintenance. |
gpupdate /force | Force Group Policy refresh | Useful after policy changes. |
wmic | Query system info via WMI | Hardware, BIOS, network, processes. |
gpresult /r | See what organization owns the computer | Group Policies Result. |
bcdedit /enum | She how current config is set | BIOS=C:\boot\*.bcd UFI=??\ufi\*.bcd on UFI partition. |
services.msc | Manage background services | Open Services window. |
taskschd.msc | Schedule automated tasks | Open Task window. |
diskmgmt.msc | Handle disk partitions | Open Virtual Disk Service window. |
devmgmt.msc | All-in-one Computer Manage | Open Device Manager window. |
compmgmt.msc | WMI Control | Open Computer Management window. |
wmimgmt.msc | Configure startup and services | Console Root\WMI Control. |
msconfig | Monitor system performance | Change Boot Options. |
perfmon.msc | Local security policies | Open Performance Monitor window. |
perfmon /rel | Shows Reliability monitor | Runs at cmd prompt. |
netsh advfirewall show allprofile | Show Firewall Settings | Domain, Private and Public Profile. |
powershell wmiobject win32_winsat | Show SAT 32 Score | Win SAT Rating. |
dism.exe /online /cleanup-image /startcomponentcleanup | Deployment Image Servicing and Management (DISM) tool | Reduces WinSxS folder size. |
netcfg | Reset all network adapters | Requires a re-boot. |
Sysdm.cpl | Lands on System Properties Page | Choose Advanced Tab. |
cipher /w:c | Wipe free space only. | Writes 0x00. |
fsutil volume diskfree C: | Confirms same amount of free space after wipe | Free bytes should equal free bytes as before the wipe. |
vssadmin list shadows | Shows shadow copies | Some could be huge. |
vssadmin delete shadows /for=c: /oldest | Deletes shadow copies on C: | Deletes only the one oldest. |
systeminfo | find "Boot Time" | Shows last time system was booted | Shows last time system was booted. |
dfrgui | Defrag GUI - Shows list of all Drives | Shows if defrag is needed? |
sc | A command line program for communicating with Service Control Manager | SYNTAX EXAMPLE: sc query type= service - List Win32 services. |
powershell -Command "<script>" | Run PowerShell commands from CMD | Integrates scripts into batch automation. |