Is it exploitable to gain elevated privileges?

Typically a user with the ability to make those calls can shut down the machine anyway. But Terminal Services/Remote Desktop may be an exception.