There is an article at blog.cocoia.com about "hardening" the security for OS X. In it, it suggests having a separate account for your admin...which you don't log into....and setting up a "normal" account for you to use everyday. I've been using my Mac with my account that I set up on day one...which is also the Admin account. Everything I do outside this account...like change system wide preferences....requires the admin password to do. Why would I need to make a separate Admin account and use a "normal" account for day-to-day functions. I mean, it's the same thing, if I wanted to change something system-wide on a normal account, it will still ask for a password. I could see doing this if the Admin account = root, but it doesn't. But does anyone else out there just run in a Normal account and have a separate, rarely used Admin account?