.. but without privileges like SeImpersonate?

  1. Run FullPowers.exe (in priv esc folder) https://github.com/itm4n/FullPowers/releases/tag/v0.1
  2. Get the privileges that originally the service account has (like SeImpersonate)