The su(1w) Windows utility requests the password for
user (or for Administrator, if no user is provided),
and switches to that user and group identifier (ID) after obtaining
the information. It then executes a command.
To use su, the user must have the following
Act as part of operating system
Replace a process level token
Restore files and directories
For information about how to grant these permissions, refer to
the Windows operating system documentation.
For the required privileges, the domain-level policy settings
override the local policy settings. If the domain-level policies do
not allow a local administrator to set the privileges, contact your
The su utility supports the following options:
Loads the user profile.
Accepts the command cmd to carry out in the specified
user context. The default is cmd.exe.
Batch logon. The target user needs SeBatchLogonRight.
Interactive logon. The target user needs
SeInteractiveLogonRight. This is the default logon type.
Service logon. The target user needs SeServiceLogonRight.