Different administrator accounts from user accounts [CPG two.E]. Only let selected admin accounts for use for admin purposes. If somebody user demands administrative rights more than their workstation, use a independent account that doesn't have administrative use of other hosts, which include servers. If a 3rd party or MSP is https://biggerman.de/mega-menu/technologie/143-datenrettung-nach-ransomware-angriff