http://it.toolbox.com/blogs/inside-erp/avoiding-a-security-nightmare-handling-erp-user-account-control-70582