Comment Re:Malware (Score 1) 181
don't allow your users to be admins on their local machines,
Ding ding ding ding ding... whenever anyone came to me for malware-related help with Windows, I make sure that they no longer have admin privileges before I let them back in. Create a separated local admin account for them if necessary, but their everyday web-surfing and mail-reading account should not need admin privileges.