It's possible to launch executable with LocalSystem privileges.
vulners.com/securityvulns/securityvulns:doc:7262
vulners.com/securityvulns/securityvulns:doc:8476