bnt,
I agree with you 100% on the "least privilege" approach - it's something I've mentioned before on here.
I do have to say that MS - and more particularly some of the lazy b@stards that write commercial software - do not make it easy at all to follow this principle, as so many applications expect and demand admin access to function. I mean kids' games fercrissake! It is sheer bloody laziness / cost-saving on the part of the developers.
Rant over.
Admin off
SD