A feature of Windows Vista that limits the damage that can be done to the system by an attacker by preventing the compromised service from changing important configuration settings in the file system or registry or from infecting other computers on the network. For example, the Remote Procedure Call (RPC) service can be kept from replacing system files or modifying the registry.