This is already best practice for IT admins (even per Microsoft's own guidelines). Privileged Access Workstations. Admins get 2 computers. One privileged, locke

This is already best practice for IT admins (even per Microsoft's own guidelines). Privileged Access Workstations. Admins get 2 computers. One privileged, locked down, where all admin tasks are done from, and one general purpose machine for email/office tasks.