Following the principle of least privilege , each process is stripped of its rights and can compute but ca n't write files or read from sensitive areas ( eg documents , desktop ) , this is similar to `` Protected Mode '' that is used by Internet Explorer 7 on Windows Vista . Following the principle of least privilege , each process is stripped of its rights and can compute , but can not write files or read from sensitive areas ( e.g. documents , desktop ) â '' this is similar to the `` Protected Mode '' used by Internet Explorer on Windows Vista and Windows 7 .