Remove local admin rights, elevate applications for standard users, allow access to trusted applications, and prevent malware propagation, cyberattacks.