I worked for a company that removed admin access on our dev machines. To be admin, we had to send an email to a foreign country and wait an hour to get a token that could only be used once.

Since I was the most productive employee (lazy bastards), I needed to be admin ten times a day. They quickly changed their decision and gave me full access to my computer again after I flooded them with admin requests and comments like “I can’t work.”

The company fired everyone later because humans cost money but that was fun while it lasted.

But... with cmd running as admin, you can spawn any application with admin permissions. That whole concept sounds horrible...