Without a doubt, kiosk hacking [http://en.wikipedia.org/wiki/Kiosk_software]
assessments have the simplest objective... Gain command execution!
During one of my engagements, I was provided with locked-down desktop that had
most/all functionality disabled.
The user account, of course, was unprivileged.
The system administrators blacklisted cmd.exe