There are several important steps to take before implementing a least privilege strategy. 1. Discover all Admin and Local Admin Privileges 2. Inventory all your devices and software 3. Monitor privileges and learn their usage 4. Replace privileges with automation policies