I call bullsh*t.
Professional Windows Administrator (3000 boxes in 20 countries in EMA).
I maintain 4 Windows accounts, (1) my user account with "email" and "sip" account. This does not even have local admin on my box and I work just fine. (2) Administrative Account, but NOT Domain Admin account. This is account that will have admin rights on servers and some delegated AD permissions. This account only does "admin" activities, eg - user account creation, check event logs, and mostly by powershell script - on a server that I never, ever browse the internet on. This server has Internet Explorer locked down and only admin utilties on it. From time to time I need this account to log in to server desktops by RDP to get specific tasks done. This admin account is never used to do "user" type activities - eg open word files or fill in HR forms. (3) A Domain Admin account - 99% of the time this is changing DNS entries, and (4) Enterprise Admin - with 99% of the time is publishing a new certificate template, with 1 time per year upgrading the AD Schema.
No admin account has access to my email and vice versa. I show VIPs that not even I run as Administrator and the "but