Rename the adminisrator account to something unguessable and give it a big password. Disable the guest account, in both places.
Why? Because administrator comes without a password, and any spyware can and does log in and have free run of the computer, thilly.
Turn on the windows firewall, it works. Don't let ZA or McGagme or Symiantec turn it off.
So run two software firewalls? You betcha dupa, and they don't conflict. And the WinXP firewall does work.
Copy in a hosts file, a real one has at least 10,000 entries. Don't match to the loopback device, 127.0.0.1
Why not? Because the machine actually pauses to look up loopback, but not null. Null B fastuh.
And when you shut down, WinXP will ask if you want to install updates, never do so.
Why? Because it just flipped into admin mode and installs spyware along with any legit upgrades. Kind of defeats running as limited user, dontcha think?
Thanks for the replies, spuds!! :-)
So do you have an alternate preferred method for installing win updates? Because they're there to patch specific vulnerabilities.