User Account Control was introduced in Windows Vista as the way to run Windows with least privilege. This created a situation where applications and scenarios move more into the per-user space, thus again removing Enterprise control of the desktop. This session will focus both on the changes made to UAC in the Windows 7 timeframe and on the new Software Restriction Policies in Windows 7.