1. Install a service using sc.exe – that will open a command prompt under local service account by executing this on cmd window
sc create debugservice binpath= "cmd /K start" type= own type= interact
2. sc start debugservice
(on a remote desktop session, this service has to be started only in console session for the command prompt window to pop up)
will print message that [SC] StartService FAILED 1053: but will start a command prompt under local system account.
3. Launch e.g. jconsole.exe