I was able to create an invisible user in windows 7 and 8.1.
The user is not visible at the login Screen, I added it to the SYSTEM account group and Remote desktop Users Group, The Administrator can know about this user via
Computer management > Users and Groups option and using
Net User Command in the shell, This user could not gain SYSTEM privliges though I am trying.
But the question is when I RDP into some host, The Local User does not know it is being RDP'ed.
How will the Administrator know when this invisible user does some malicious activity like deleting a file etc. as it is invisible in event log?
You can also use
-p option for username "sys" and password "007" to log into invisible user through command shell via your other account, and you can RDP using invisible user that's it.
Why do they exist?
Please delete this question if I am wrong and I don't know enough, I want to know from experts like you.