There is a known trick to bypass DropMyRights - using a network share on loop-back interface, e.g:
ren \\localhost\c$\windows\system32\malware.exe cmd.exe
That is limitation of remote impersonation. DropMyRights creates a restricted token which cann… more »
XML Feeds