Least Privilege

Every account and process gets the minimum power it needs — so compromise buys as little as possible.

Core Principles & Analysis

• Saltzer and Schroeder named it a core design principle back in 1975.
• Stripping admin rights neutralizes the large majority of critical Windows vulnerabilities.
• Modern practice grants powerful roles just-in-time and revokes them automatically.