Comment least privilege (Score 1) 823
Having spent days (weeks, months, years?) configuring Windows XP over the years I tend to follow a pattern that works for me, ymmv.
Windows still installs broken (imco) in that the first user installed becomes an Administrator by default. With Windows, we all know by now that running as Administrator is asking for it (some have likened it to pulling ones pants down and bending over the chair.) So it's important to remove Administrator group privileges from the primary user, having them run as Users only. This prevents a host of malware and other malfeasants from gaining illegitimate access to the computer.
Install a good anti-virus software, my personal favourite is Symantec Corporate for it's ease of configuration and automation for updates. I set the software to live update daily, perform a startup scan of files loading into memory at boot time, and a weekly full scan of everything on the hdd.
Ensure that you're running Windows Update to the last iteration and get all of the updates installed correctly. Turn on automatic updates, and set it to install automatically.
Run MBSA... follow the directions provided.
Install Firefox, and the NoScript add-on. Make it the default browser in all profiles by logging on and making that choice. Ensure NoScript is up and running correctly.
The base system has excellent accessibility tools, ensure the user is familiar with them, and perhaps ensure that accessibility shortcuts are available from the desktop if necessary.
Teach... (who says old dogs can't learn new tricks?)
Wash, rinse, repeat.
Windows still installs broken (imco) in that the first user installed becomes an Administrator by default. With Windows, we all know by now that running as Administrator is asking for it (some have likened it to pulling ones pants down and bending over the chair.) So it's important to remove Administrator group privileges from the primary user, having them run as Users only. This prevents a host of malware and other malfeasants from gaining illegitimate access to the computer.
Install a good anti-virus software, my personal favourite is Symantec Corporate for it's ease of configuration and automation for updates. I set the software to live update daily, perform a startup scan of files loading into memory at boot time, and a weekly full scan of everything on the hdd.
Ensure that you're running Windows Update to the last iteration and get all of the updates installed correctly. Turn on automatic updates, and set it to install automatically.
Run MBSA... follow the directions provided.
Install Firefox, and the NoScript add-on. Make it the default browser in all profiles by logging on and making that choice. Ensure NoScript is up and running correctly.
The base system has excellent accessibility tools, ensure the user is familiar with them, and perhaps ensure that accessibility shortcuts are available from the desktop if necessary.
Teach... (who says old dogs can't learn new tricks?)
Wash, rinse, repeat.