[Isolation enhancement] Block elevated processes from manipulating local user accounts

[hg421]

It seems that Sandboxie fails to block sandboxed elevated processes from manipulating local user accounts.

For example, by running net user USERNAME PASSWORD from an elevated command prompt it is possible to set a new password for any local user account on the machine.
It is also possible to modify group membership, e.g. adding/removing user accounts from the local Administrators group.
Also you can completely remove a user with net user USERNAME /DELETE.

(Those commands really affect the "real" user account and are not isolated in the sandbox)

I think that sandboxed processes should definitely be disallowed from making such changes...

[DavidXanatos]

There is a temporary workaround,
ClosedIpcPath=\RPC Control\samss lpc
collateral damage unknown, but it solves the issue

I'll have to add a IPC port filter for that one to properly only block requests that are problematic while allowing read only queries