It’s difficult to convince users that having all the privileges on their system is a bad thing. It’s much easier to be a victim of an attack if you are the user empowered to do all things with your password. When your password is broken the keys to the entire kingdom are available to the attacker. If, however, you are a standard user, the compromise of the system is isolated to one user, and the admin account may be the easiest way to solve the issue. So How to fix this?