Currently, there is no way to separate users in Windows. They have different profiles, but that is the equivalent to putting on a different color hat. If one profile is insecure, they all are. (The first person to say, “Dual Boot” gets dual-booted!) (say: “VM” and you get a hex put on you!)
Fortunately, on my current laptop, by simply removing a cover plate, I can easily pull out the hdd and replace it with another one on which I also have installed the same authorized copy of Windows. This way I can have separate drives for my Audio Production workflow, my Video workflow, and my office/personal/goofing-around (not)workflow.
If why I would want this isn’t clear, imagine not having to worry about corrupting my uber-valuable production drives because of some malware. I stay off the web when doing that work and only install precisely what I need, nothing more. Additionally, I never have to worry about rogue background processes from all those power/data hungry apps; again, because I have nothing I don’t need installed. It’s as if I have 3 different computers. Seriously. It’s great!!! Only one downside for the 5+ years I’ve been doing it. (windows updates on 3 drives is a trade-off.)
Here is how the mechanism works on mine:
(btw, I don’t have to turn it upside down to exchange, and I never replace the cover plate. Nothing falls out or is insecure.)
Yes, the FF is 2.5 SATA. [read:huge] but imagine using M.2. It could work not much different than a big SD slot.
Anyway, that is the first feature on my dream machine that probably hasn’t been suggested elsewhere. Thanks for looking.