I think the main takeaway is this: "it is more likely a threat from a rogue Domain User trying to break out of restrictions imposed by a Domain Admin." Another

I think the main takeaway is this: "it is more likely a threat from a rogue Domain User trying to break out of restrictions imposed by a Domain Admin." Another way of phrasing this is "it's a way for overly restricted developers to make some minor modifications on their machine to actually get some work done." I could have really used this trick when I worked at a large corporation with a locked-down environment...