There was also the sudo-UAC thing. I totally think it was the right thing to implement and improved the security for the power users a lot, but pisses everyone off for being annoying as hell (and it taught people to "approve" everything, which is bad).

It became much less of a pain in the ass when it comes to Windows 7's implementation, but it was a step in the right direction.