Windows services can provide persistence when a new service is registered for automatic startup or an existing service's configured executable path is changed. This procedure shows those two service-control options and a start attempt; it does not describe WinRM plug-in registration. Service creation and configuration require appropriate local Service Control Manager rights; the commands shown target the local host and do not require Internet exposure or remote SCM access. A service runs under its configured account; when an account is omitted for a Win32 service, Windows uses LocalSystem.
RESTRICTED_ACCESS_BLUR_MARKER
RESTRICTED_ACCESS_BLUR_MARKER
RESTRICTED_ACCESS_BLUR_MARKER
RESTRICTED_ACCESS_BLUR_MARKER