tool to get NT SYSTEM shell , its works by duplicating tokens of already running system processes , you can also specify a process . Usage : run the following commands as admin
NT_sys_shell //in this case it uses winlogon by default
or
NT_sys_shell Name_of_process