Re:No surprise here (Score 1)

Check out Aaron Margosis' blog at http://blogs.msdn.com/aaron_margosis - he's got some very interesting helpful bits for folks who want to start down the path of least-privilege access on Windows. It's not the "official" word, and it's not at all comprehensive, but it's part of a wave of folks inside MS who are putting these practices to good use right now.