Seal the file. No one speaks of the 639 days.
From our shell we can simply activate the Administrator account (if it were disabled) and then open a RDP session. hmn-639
# From a remote PowerShell session (if possible) or using the “procmon” capture from the web app, # we saw that the service runs as LocalSystem and listens on \\.\pipe\svc_pipe. Seal the file