Implementing Least-Privilege Administrative Models ...
Important. You should consider carefully whether users require administrative rights on their workstations, and if they do, a better approach may be to create a separate local account on the computer that is a member of the Administrators group.