I have worked for many people who worked for a living and then one day there was a million dollars in the bank that they truly could withdraw and take with them. At this point, they become greedy, and greedier. Previously if the computer(s) are broke "Fix them, send me the bill.". Now as rich, "Are you sure there isn't a cheaper way?" "We can get buy without that computer." etc. So my answer is find a cause(s) that can spend your money well and decently and give it away. Keep some for a rainy day or move to a place you always wanted to live, but don't become rich, you may not like your life afterward or yourself. Contact me if you want a good cause... I have one.

Many before have discussed the basic Winblows lock downs... no Admin access. (Beware XP sometimes will not update virus or patches with limited access users.) Lose IE as primary browser etc. More some OS to Linux. All good ideas worthy of deployment when possible but in the meantime:

Take a defensive approach vs. offensive:

ISCnetwork.com has a Firewall content Filtering Server, others may also.

It first is a firewall between your current Internet access and the rest of the LAN(s).

1. The FcFS blocks access to blacklisted web sites... porn, spyware, gambling, warez, virus infected, and some other 20 categories if wanted.

2. The FcFS filters out advertisements from pages. Pop-ups are eliminated or just blank. These are where most spywares / adwares are found for the employees to download and install.

3. The FcFS filters out email viruses & SPAM; another source of spywares. FcFS can be set to strip off bad attachments so newest viruses become less of a problem before Norton or McAfee have a cure.

4. The FcFS offers a "Whitelist" of company approved web sites. Some employees can be limited to only a handful of "approved" web sites. Example: If you are a public library and have card catalog computers, the card catalog is all that the computer can ever access.

5. The FcFS keeps track of internet usage. You can see which computer is trying to send out company information by the "access denied" list. This keeps down the constant battle of scanning and debugging what turns out to be clean computers.

6. The FcFS has on the fly website blocking from any browser. You find an abuse that is not blocked like victoriasecret.com add it to the lists.

Good luck with your battle. Our spyware block list has grown from 600 in January to over 40,000. I figure by the first quarter of 2005 it will surpass the virus infection available to XP some 65,000 or so.