Through combinations of "link shell extention" which messes with links.
"take ownership" which messes with protections, and "unlocker" which can do deletes of locked file, and deletes at boot, You can do anything.
Disclaimer: Including destroying the whole system :-) So a full image backup (that works outside of the system, does not rely on the system, and works when the system is ruined) would be the first requirement.
Add in programs like "autoruns" , using "process explorer" and "resource monitor" , understanding cmd items "fsutil" , "net", "devcon" , and working elevated, or under the real admin, are handy things also. All usefull in further getting myself into more trouble , going to war with the new system.
No links are provided, because getting them is the easy part, just make sure you get them from source locations.