At work, we've recently received a recommendation to have two separate accounts for domain administrators. One account would be a standard user account with no admin privileges and one would be a member of Domain Admins. While I can understand why this recommendation is being made, it seems like a royal pain as well.
I know that UAC manages this type of privilege escalation in a mostly transparent way. Is UAC or another solution capable of providing this level of protection?