Run a 32 bit DLL function. This command is available on all version of
Windows from Win95 onwards, but only runs in 32 bit mode.
Many options are case sensitive.
Syntax
RUNDLL32.EXE dll_name,EntryPoint [optional_arguments]
Key
dll_name A full path to the DLL to ensure that the correct one is found.
For best results, use the short file name.
EntryPoint The name of the entry point function.
The comma (,) between the dll_name and the EntryPoint function name is required.
If the comma separator is missing, Rundll32 will fail without indicating an error.
In addition, there cannot be any white spaces in between the dll_name, the comma, and theEntryPointfunction.
Examples
Add a Network Printer:
RUNDLL32 printui.dll,PrintUIEntry /ia /c\\server /m "AGFA-AccuSet v52.3"
/h "Intel" /v "Windows 2000" /f %windir%\inf\ntprint.inf
Add a Local Printer:
RUNDLL32 printui.dll,PrintUIEntry /if /b "Test Printer" /c\\SERVER
/f "%windir%\inf\ntprint.inf" /r "lpt1:" /m "AGFA-AccuSet v52.3"
Add a printer connection that's available to anyone who logs on:
Rundll32 printui.dll,PrintUIEntry /ga /n\\Server\PrintShare
Display the per-Machine printer connections:
RUNDLL32 printui.dll,PrintUIEntry /ge /c"\\workstation64"
Display all the available commands for PRINTUI.DLL - add/remove print drivers, print queues, preferences, properties etc:
RUNDLL32 printui.dll,PrintUIEntry /?
Clear IE Tracks:
RunDll32.exe InetCpl.cpl,ClearMyTracksByProcess number
where number is one (or several added) of the following values:
1 Browsing History 2 Cookies 4 Temporary Internet Files 8 Offline favorites and download history 16 Form Data 32 Passwords 64 Phishing Filter Data 128 Web page Recovery Data 256 Do not Show GUI when running the cache clear 512 Do not use Multi-threading for deletion 1024 Valid only when browser is in private browsing mode 2048 Tracking Data 4096 Data stored by add-ons 8192 Preserve Cached data for Favorite websites
Lock workstation:
RUNDLL32.exe user32.dll, LockWorkStation
n.b. this is an unsupported hack, which may fail in the future - details on oldnewthing
A PowerShell
function: Lock-WorkStation is supported.
“If you're rich you can buy books. If you're poor, you need a library” ~ John Kenneth Galbraith
Related:
Qchange.vbs - Change Printer Connection
PRNCNFG - Configure or rename a printer.
PRNMNGR - Add, delete, list printers and printer connections.
REGSVR32 - Register or unregister a DLL
WMIC PRINTER - Set printing options through WMI.
Q164787 - Rundll32 command line.
PowerShell:
Get-WmiObject - Get WMI information