Microsoft 微软的网络安全保护 https://www.microsoft.com/en-us/insidetrack/search?text=information+protectionhttps://www.microsoft.com/en-us/insidetrack/search?text=information+protection 特权管理最佳实践: Improving security by protecting elevated-privilege accounts at MicrosoftMicrosoft Digital developed and implemented a defense-in-depth security approach to help reduce our attack surface and take enterprise security to the next level. We are implementing least-privilege access, using isolated identities for elevated privilege accounts, and reducing the amount of persistent elevated access. For administrators, we are providing secure workstations that are used to connect to a dedicated cloud environment in a secure datacenter.https://www.microsoft.com/en-us/insidetrack/improving-security-by-protecting-elevated-privilege-accounts-at-microsoft