diff --git a/roles/home-cli/files/Microsoft.PowerShell_profile.ps1 b/roles/home-cli/files/Microsoft.PowerShell_profile.ps1
index 91a82ca..a298830 100644
--- a/roles/home-cli/files/Microsoft.PowerShell_profile.ps1
+++ b/roles/home-cli/files/Microsoft.PowerShell_profile.ps1
@@ -67,6 +67,9 @@ if ($IsWindows -or ($env:OS -eq "Windows_NT")) {
     function who {
         & "$env:SystemRoot\System32\query.exe" user
     }
+
+    # Drop elevation privileges.
+    $env:__COMPAT_LAYER = "RunAsInvoker"
 }
 
 Set-PSReadlineOption -BellStyle None