This will be short and sweet and I only post it because it's hard to find via google but should be base knowledge for any hacker. SysInternals is your friend. If it's on the box or you can drop it there it gives pretty complete control at a very granular level. Even if you drop one or two of the tools rather than the whole suite it makes privesc a breeze. For example If you have admin, and need System: psexec -i -s "cmd.exe" that is all. Pretty short and easy to read one-liner and good tool for the arsenal.
