su

NAME

su - Windows command-line utility to allow one to become another user without logging off

SYNOPSIS

su [-] [-c cmd] [-b|-i|-s] [-e] [-v] [-w] [-n]
   [{[[user] [-d domain]] | [domain/user]}]

DESCRIPTION

The su(1w) Windows utility requests the password for user (or for Administrator, if no user is provided), and switches to that user and group identifier (ID) after obtaining the information. It then executes a command.

To use su, the user must have the following permissions:

• Act as part of operating system
• Replace a process level token
• Increase quotas
• Restore files and directories

For information about how to grant these permissions, refer to the Windows operating system documentation.

For the required privileges, the domain-level policy settings override the local policy settings. If the domain-level policies do not allow a local administrator to set the privileges, contact your domain administrator.

OPTIONS

The su utility supports the following options:

-

Loads the user profile.

-c

Accepts the command cmd to carry out in the specified user context. The default is cmd.exe.

-b

Batch logon. The target user needs SeBatchLogonRight.

-i

Interactive logon. The target user needs SeInteractiveLogonRight. This is the default logon type.

-s

Service logon. The target user needs SeServiceLogonRight.

-e

Disables environment preparation (inherit parent environment).

-v

Verbose output to stdout.

-w

Does not wait on child.

-n

Does not create new console.

-d

Allows the user to enter the domain name. The default domain is the local computer.

DIAGNOSTICS

Possible exit-status values are:

0

Successful completion

1

Failure

NOTES

• Not specifying a domain causes account lookup in the following order:
  1. Well-known group
  2. Built-in group
  3. Local accounts
  4. Primary domain
  5. Trusted domain
• Specifying a period or dot (.) as the domain limits the user search to the local computer.