Setting LocalAccountTokenFilterPolicy = 1 will enable remote logins bypass UAC and elevate themselves to Administrator...