Restricting admin privileges to a separate account helps mitigate, but does not entirely remove, these threats. Acting as an administrator an attacker could install more malicious software, run a command line program with elevated rights, delete user accounts, and more. If malicious software ever got onto your PC or it was hacked remotely there’s the potential for bypassing the UAC and using your account’s elevated privileges. The argument for doing this is pretty straightforward. You’ll still be able to authorize almost all the actions you do now from your everyday account, but you’ll have to enter a separate password each time instead of just clicking Yes or using your current account password. Then we create a separate local user account to act as administrator. Nevertheless, we can improve the situation by removing administrator privileges from our everyday account. The UAC is a little more robust than that description suggests. An example of a User Account Control dialog box in Windows 10.
