Our (state) agency uses separate computer accounts for regular use and admin use. The admin account has neither network nor email access in order to prevent using the admin account on a regular basis. With state government agencies continually attacked with ransomware, we aren't as bondage and discipline as banks (which I have done before) or DOE (which was very severely extremely locked down and I was not connected to classified stuffs).

I have not needed admin credentials for regular development purposes since VB6 (which I was using until 2013). VB6 and ActiveX dlls required read/write access to the registry all the time.