Microsoft recommends using a separate device for administrative tasks

Microsoft's Security Team publishes basic advice for securing corporate networks.