When you have administrator kerberos certificates/tickets.

  1. PsExec - gives shell as NT Authority / System.
  2. WmiExec - gives shell as Administrator