https://ones.com/ja/blog/knowledge/optimizing-pc-admin-account-permissions/