You can always run PSEXEC -s -i to run
a process as the SYSTEM user.
Ah.. love the SysInternals utilities!
I do this when I want to run REGEDIT
as the SYSTEM user in order to get access to the SAM and SECURITY hives.
Neat trick! I've never been in those hives before. >:->
I imagine you could run "PSEXEC
-s -i explorer.exe" to run an instance of Explorer as the SYSTEM user.
Running that at the "normal" desktop simply opens an Explorer window and doesn't leave an explorer.exe running as SYSTEM. Running it on desktop 0 is no different than running explorer.exe, I'm sure since it already is SYSTEM.
.
.
More observations (yup, still fiddlin')...
If desktop 0 sits there for longer than like a minute without being touched, the console automatically locks itself. Hitting Ctrl+Alt+Del takes you to the screen where you can unlock a currently logged in user or log in another user with Other User. Hitting Ctrl+Alt+Del while on desktop 0 also immediately locks the console.
There's an explorer.exe in both C:\Windows and C:\Windows\system32. They're only close in size, so not the same file. Running the one in system32 gives the identity is incorrect error, whereas the one in Windows gives the actual desktop (so my cmd vs. tcc observation was incorrect; I just so happened to run the wrong one with cmd and the right one with tcc due to having "Win64 File System Redirection" turned off). Trying to run either one after Explorer is already started results in the same identity is incorrect error. IE runs just fine, though. But typing C: into the address bar, which normally morphs it into an Explorer window, results in the same identity is incorrect error.
LOL It's actually possible to close the "Return to your Windows desktop" dialog and another combined item called "Shell0 Window" using the red Xes on the icons on the taskbar once you get Explorer running. This gives you the illusion that you're stuck on that desktop with no way to return! I found that starting anything with a GUI, like Task Manager by right clicking the taskbar, makes the "Return to your Windows desktop" dialog reappear. Of course, in hindsight, I could have hit Ctrl+Alt+Del or just let it sit there long enough.
I'm doing this on another computer now and I'm trying to figure out a way to see exactly what (probably the same) 2 items are in the Recycle Bin, since attempting to bring up ANY type of Explorer window results in the identity is incorrect error.