Diagnosis the GUI cannot match
Network problems are where cmd pays for itself. ipconfig /all shows adapter, DNS servers and lease times in one screen; ipconfig /flushdns clears a poisoned resolver cache when one site resolves wrong; ping -t 8.8.8.8 run for a minute reveals packet loss that a four-ping default hides; tracert shows exactly which hop the path dies at; nslookup example.com 1.1.1.1 gives you a second opinion on a suspicious DNS answer. Together they answer in ninety seconds what Settings buries under five screens.
The same goes for hardware honesty. powercfg /batteryreport generates an HTML page with design capacity versus full charge capacity — the real number behind every “my battery died” complaint; systeminfo dumps uptime, RAM, hotfixes and original install date in one sweep; whoami /priv shows the exact rights your session carries, which settles half of all access-denied mysteries before you start searching.
- ipconfig /all — adapters, DNS and leases on one screen
- ping -t 8.8.8.8 — a sustained loss test, not a four-ping snapshot
- tracert example.com — which hop the connection dies at
- nslookup example.com 1.1.1.1 — a second DNS opinion
- powercfg /batteryreport — real battery wear in HTML
- systeminfo — uptime, RAM, hotfixes, install date
Repair and inventory
When Windows misbehaves, the repair chain runs from cmd. sfc /scannow verifies protected system files against the component store and repairs what it can; DISM /Online /Cleanup-Image /RestoreHealth repairs the component store itself when sfc cannot; chkdsk C: /scan checks the disk online without a reboot and schedules offline fixes only when needed. The order matters: DISM first if sfc complains it found corrupt files it could not fix.
Process and driver inventory lives here too. tasklist /svc maps every process to its services — the answer to “what is svchost doing”; taskkill /PID 4212 /F ends what Task Manager refuses to; driverquery /v lists every driver with dates and providers, worth saving before and after driver updates; netstat -ano maps ports to PIDs, which settles “which app is listening on that”; shutdown /r /t 0 reboots immediately when a broken shell blocks the Start menu.
Small conveniences and one command that bites
The everyday set is small but habit-forming: cls clears the screen, ver prints the Windows version when someone asks, assoc shows which program owns a file extension, and robocopy copies folders with resume support and a mirror mode that second-tier GUI tools still lack. robocopy source target /MIR is genuinely excellent — and genuinely dangerous, because mirror means the target becomes identical to the source, deletions included.
The one to respect is cipher /w:C, which wipes free space so deleted files cannot be recovered — useful before selling a disk, catastrophic when run casually on the wrong volume. It cannot damage existing files, but on a big drive it runs for hours and hammers the SSD with writes. Know it, use it deliberately, and let the other nineteen do the daily work.
Questions and Answers
Does anyone still need cmd when PowerShell exists?
Yes — for these exact jobs. The twenty commands here run unchanged on every Windows since XP, need no execution policy, start faster, and none of them has a GUI path quicker than typing one line.
What does the cipher /w command do in Windows?
It overwrites the free space on a drive so previously deleted files cannot be recovered. It touches no live files, but runs for hours on large drives and adds wear on SSDs — use it deliberately.
Know what is included before you buy.
The one-time 30-minute trial covers core tools. PRO-labelled features stay locked until a paid license is activated.
Read next
Write to us: [email protected]