I've taken the plunge, and removed my regular login account from the Administrators group. Not too many show stoppers so far - i did discover that my machine had a wrong group policy being applied, but that is fixed now. I've set up a Command Prompt shortcut that will run as my separate admin account. This article on running control panel applets is also useful: Run Control Panel Applets as Another User: "How can I run Control Panel applets as another user"