Overview
The OptionalFeatures command enumerates Windows optional features and roles installed on the system via WMI. These features include server roles, administrative tools, and optional Windows components that may affect the system’s attack surface.Syntax
Remote Execution
Output
Returns optional feature information:- Feature name
- Installation state (Enabled/Disabled)
- Feature description
Use Cases
- Red Team
- Blue Team
- Identify installed server roles
- Discover administrative features
- Find potential attack vectors
- Determine system purpose (web server, file server, etc.)
Example Output
Remote Execution
This command supports remote execution using the
-computername parameter.Detection Considerations
Low detection risk - queries WMI for feature information.
Related Commands
- OSInfo - Operating system information
- Services - Running services
- WindowsFirewall - Firewall configuration