Microsoft recommends using a separate device for administrative tasks