And of course secure it properly. Never log in as an admin and disable the auto elevation prompt thing. Disallow anything from writing to the root directory and especially disallow creating new directories in the root, plus bin any rubbish ones that are there. Set acls tight on the file system. Use SRP (Software Restrictiion Policies) to ensure that code will only run if it is located in one of the official directory trees proper locations in the file system and for example SRP-blacklist everything but enable code execution in the windows directory and the \program files\ and program files (x86)\ directories and all their subdirectories of course. In particular I blacklisted the temp directory as a belt-and-braces tot sanity check and blacklisted all drive letters to cover removable drives. Don't run antivirus, it will just make a system unreliable and slow and it's pointless anyway on a well secured system because if things are done right no alien code can even run anyway. My tips for a 100% trouble free life for all my many customers and their emplyiees when I was working. Apologies sincerely if all is already obvious to you. :-)