How do I enable Restricted Admin mode on a Windows system?

Restricted Admin mode can be enabled by installing patch 3126593 or by modifying the registry. Create a DWORD value named `DisableRestrictedAdmin` under `HKLM\System\CurrentControlSet\Control\Lsa` and set it to `0` to enable. The equivalent command is: `REG ADD "HKLM\System\CurrentControlSet\Control\Lsa" /v DisableRestrictedAdmin /t REG_DWORD /d 00000000 /f`. Note that the client must also support Restricted Admin mode; Windows 7 and 2008 R2 require patches 2871997 and 2973351. For more details, refer to the original article.