Setting up user accounts - best practices vs. Microsoft 365...

Hello,

I have always set up my machines to have an administrator account that I use to complete admin tasks, but obey the best practices and create a standard user account as well. My question/conflict is that I want to subscribe to Microsoft 365 so I can get Windows 11 Enterprise. I will plunk down the $57/month to get this privilege. However, it seems that since the first account you create in M365 is necessarily the administrator account, how do I use the features like Office 365, my OneDrive, etc. that are all tied to an Administrator account in M365, but remain a standard user on Windows?

Check my specs to see what I am working with...

I'd appreciate any input/insight into my little quandary...

Thanks!

It is normal practice to require that the first user created to be an administrator level user this applies to any shared resource system it should not be a requirement for secondary users to have the admin rights.

The setup for a stand alone PC requires this but subsequent users would normally be standard users and the administrator would assign each users with a personal data area, access to common areas and other resources, the same system of rights assignments also applies to networks from small household to multinational enterprises ( although there will be layers of administrators rather than a single one)

I would expect that you (as the admin) would assign these user rights to the other users of the system

One other point for some time now, actually from the release of Vista - the best practice of an Admin and standard user for safety/security for the Admin account(s) is controlled by The UAC system. When you create an Admin user you actually create two accounts with the same name, a Standard and an Admin user . By default the user is in Standard mode but should you try to perform a restricted admin only task the UAC will pop up a request to elevate the account to Admin, and also ask for a password. other access levels and requirements is controlled by the UAC and is a safety system as if the admin account is left running on a system a normal user would need the password to perform any admin tasks