Recently I have learned that you can easily bypass UAC from task manager and I tend to use that information and see how far I can escalate