To increase my overall security, I created a separate Admin Windows login and downgraded my normal day-to-day account to a Standard User.

However, in my Standard account, I seem to be able to do everything I could when it was an admin account.  Can someone tell me what I need to do to vastly restrict what a standard user can do?  And don't say "switch to Linux" - I'm working toward that goal, but there's a million steps involved.

I want to limit what malware would be capable of doing on my PC.