How do you enforce least privilege on Windows and Mac endpoints without compromising productivity or security?