Hidden Windows Commands Cheat Sheet

A curated list of useful hidden commands for Windows power users, IT professionals, and enthusiasts.

1. Drive & Volume Management

Command	Purpose	Notes / Example
`mountvol /r`	Reset stale volume mount points	Removes old USB history and orphaned volume GUIDs; useful for eliminating false “Scan and Fix” prompts.
`diskpart`	Disk partition management	Use `list disk`, `select disk`, `clean` to manage partitions.
`fsutil dirty query X:`	Check if volume X: has the dirty bit set	Requires admin rights.
`chkdsk`	Check and repair filesystem	`/f` fixes errors, `/r` locates bad sectors.
`robocopy`	Robust file copy and mirroring	Preserves timestamps and retries automatically.
`vssadmin`	Manage Volume Shadow Copies	Useful for creating or listing snapshots.
`defrag`	Optimize disks	`/C` defrags all volumes, `/X` consolidates free space.

2. Network & Connectivity

Command	Purpose	Notes / Example
`ipconfig /all`	View detailed IP configuration	Use `/release` and `/renew` for DHCP changes.
`netstat /ano`	View active network connections	Shows process IDs of each connection.
`arp -a`	Show ARP table	Good for local network troubleshooting.
`nslookup`	DNS query tool	Test name resolution.
`tracert`	Trace route to a host	Shows hop-by-hop latency.
`netplwiz`	List users	Del those not wanted.

3. System & Process Management

Command	Purpose	Notes / Example
`tasklist`	List running processes	`/svc` shows associated services.
`taskkill /PID <pid> /F`	Terminate a process	Requires admin for some processes.
`whoami /priv`	View user privileges	Useful for permission troubleshooting.
`systeminfo`	Show detailed system info	OS version, uptime, memory, etc.
`sfc /scannow`	Repair protected system files	Runs System File Checker.

4. Registry & Configuration

Command	Purpose	Notes / Example
`reg query`	Read registry keys	Example: `reg query HKLM\SYSTEM\CurrentControlSet\Control\Session Manager`
`reg add`	Add registry keys	Can script configuration changes.
`reg delete`	Delete registry keys	Always back up first!
`wmic memorychip get blanklabel, capacity, speed`	Delete registry keys	Always back up first!
`findstr /c:"error" %windir%\logs\cbs\cbs.log`	Find errors in CBS log files.	CBS log files are huge by default.
`bcdedit`	Manage boot configuration	Change default OS, safe mode options, etc.

5. Hidden “Under-the-Hood” Tools

Command	Purpose	Notes / Example
`fsutil reparsepoint query <path>`	Inspect junctions/symlinks	Advanced filesystem analysis.
`cipher /w:X:`	Wipe free space securely	Does not touch existing files.
`takeown /f <file>`	Take ownership of a file/folder	Useful for locked files.
`icacls`	Manage permissions	Grant, remove, save ACLs.
`powercfg /batteryreport`	Generates a detailed battery report	Battery life report saved to file path C:\bat\battery-report.html.
`powercfg /energy`	Generate power efficiency report	Checks system for energy waste.
`wevtutil`	Manage Event Logs	Export, clear, or query logs.

6. USB & Removable Media

Command	Purpose	Notes / Example
`wmic logicaldisk get name, volumename, description`	List drives with info	Works well in batch scripts for USB detection.
`mountvol`	Manage volume mount points	Use `/r` to remove stale mounts; `/p` to dismount.
`diskpart`	List disks and volumes	Can clean partitions or assign letters.
`devcon`	Device Console	Enable/disable devices from command line.

7. Miscellaneous

Command	Purpose	Notes / Example
`schtasks`	Schedule tasks from CLI	Automate scripts and maintenance.
`gpupdate /force`	Force Group Policy refresh	Useful after policy changes.
`wmic`	Query system info via WMI	Hardware, BIOS, network, processes.
`gpresult /r`	See what organization owns the computer	Group Policies Result.
`bcdedit /enum`	She how current config is set	BIOS=C:\boot\.bcd UFI=??\ufi\.bcd on UFI partition.
`services.msc`	Manage background services	Open Services window.
`taskschd.msc`	Schedule automated tasks	Open Task window.
`diskmgmt.msc`	Handle disk partitions	Open Virtual Disk Service window.
`devmgmt.msc`	All-in-one Computer Manage	Open Device Manager window.
`compmgmt.msc`	WMI Control	Open Computer Management window.
`wmimgmt.msc`	Configure startup and services	Console Root\WMI Control.
`msconfig`	Monitor system performance	Change Boot Options.
`perfmon.msc`	Local security policies	Open Performance Monitor window.
`perfmon /rel`	Shows Reliability monitor	Runs at cmd prompt.
`netsh advfirewall show allprofile`	Show Firewall Settings	Domain, Private and Public Profile.
`powershell wmiobject win32_winsat`	Show SAT 32 Score	Win SAT Rating.
`dism.exe /online /cleanup-image /startcomponentcleanup`	Deployment Image Servicing and Management (DISM) tool	Reduces WinSxS folder size.
`netcfg`	Reset all network adapters	Requires a re-boot.
`Sysdm.cpl`	Lands on System Properties Page	Choose Advanced Tab.
`cipher /w:c`	Wipe free space only.	Writes 0x00.
`fsutil volume diskfree C:`	Confirms same amount of free space after wipe	Free bytes should equal free bytes as before the wipe.
`vssadmin list shadows`	Shows shadow copies	Some could be huge.
`vssadmin delete shadows /for=c: /oldest`	Deletes shadow copies on C:	Deletes only the one oldest.
`systeminfo \| find "Boot Time"`	Shows last time system was booted	Shows last time system was booted.
`dfrgui`	Shows list of all Drives	Shows if defrag is needed?
`powershell -Command "<script>"`	Run PowerShell commands from CMD	Integrates scripts into batch automation.

💡 Tip: Most of these commands require Administrator privileges to be fully effective.