Physical Attacks
Add New Local Admin to windows machine
Hiren's BootCD PE (hirensbootcd.org) Using Hiren's BootCD to Create Admin User Accounts - TurboFuture
This can also be used to disable EDRs and AVs by replacing core exes and dlls used by these solutions