Originally posted by: n0cmonkey
My favorite feature is the least priviledge execution stuff. It's like christmas. :heart:
Yep. Even admins are safer by default because users in the administrators group get a split token. When they log in, they are using a regular, lower priv token. When they need to do admin things, they get the consent UI and then the admin token is used.