essentially it allows only one process of IE browser thereby bypassing resident viruses and trojans. its different from creating a user in linux as it has it own windows dependant security protocols running behind it hope that helps in explaination Thanks