Separate window to carry out tasks?

Answer 1

In general, I logon to my corporate PC as a regular user (and access the internet, email and applications with normal privileges).

I always fire up two command lines in the context of a limited workstation Administrator (using either RunAs or CPAU.EXE) in which I run ad hoc command-line tools and scripts (and can trigger MMCs, such as compmgmt.msc in that context from these).

Finally, I have a connection to a Terminal Server where all my sensitive admin tools run.

Is that what you were meaning?