Windows Plug and Play can abuse signed vendor installers to gain SYSTEM access on Windows 11, including over RDP when USB redirection is enabled.