restrictEnabled in Integrity Protection Driver (IPD) 1.2 delays driver installation for 20 minutes, which allows local users to insert malicious code by setting system clock to an earlier time.
http://www.securityfocus.com/bid/6295
http://www.iss.net/security_center/static/10745.php
http://archives.neohapsis.com/archives/ntbugtraq/2002-q4/0087.html