Here's a continuation of the Top 10 Windows Desktop Lockdown Tips & Tricks recently written by Darren Mar-Elia in WindowsITPro:
#2 Elevate as needed: As a corollary to No. 1, sometimes you need to elevate user privileges to allow them to get their jobs done, especially if they are mobile users. Look for third-party products that let you selectively elevate on a per-application or task basis to let users do what they need. This is an important capability because, as you move to least privilege, help desk calls from users who can no longer perform certain tasks will increase. Having a solution that lets you elevate specific tasks can reduce these calls while ensuring security.
Learn how one Viewfinity CIO customer, Lathrop & Gage, is using our Privilege Management product to move from its Wild Wild West environment to more of a least privileges operation.