Try getting an unprivileged Python REPL to run on a “managed” computer. (Yet you can probably make arbitrary kernel32.dll calls from an Excel spreadsheet.)