You can create a separate user, but even a user in the administrators group doesn't have an admin token until elevation. If you trust yourself to not blindly c

You can create a separate user, but even a user in the administrators group doesn't have an admin token until elevation. If you trust yourself to not blindly click OK on every UAC prompt, a single user account in the admin group is fine.