Steve,

Great article and wonderfull graphic.

One question I have always had about this new Policy of least privilidge that M$ started pushing for in XP is this.

Are internall or supported products (like Install Shield, Remedy, Office, IE) following all these rules, or are they given exceptions that allow thier products to still work?

There are some products that we have developed in house where we work that allow us to seemlessly update everyone to the latest version of our current software.

With these changes, our only answer from M$ has been to purchase a partners product that does a limited what we want to do.

Don't get me wrong, I understand the need for this change in security and code execution levels and all the issues it resolves.

I would like to see better support from M$ when it breaks things that are working using previous design patterns they had provided.