Bullet proofing a computer

[Vae]

Boss has got a new computer for his wife and to save me hassle (ie.e. having to go fix it in future) I need to bullet proof it as much now as possible so what software should I install to stop her getting infected etc?

Firefox (and adblock)
Avast antivirus
Zone Alarm firewall
Microsoft anti spyware

Other...?

 

[Kryten]

The weakest part of any computer is the person sitting in front of it.
You've a decent collection of protective software installed already, what I find useful with people who are not entirely computer literate, is an A4 sheet stuck behind the computer on the wall with some handy pointers.

Nothing too simple, nothing that will make the user feel stupid, but things like

"Nothing is free - so please don't go to websites or open emails that promise something unless you are expecting it"

I don't know the level of your boss's competancy, however some pointers on an easily visible peice of paper in accordance to his competence might be of use.

"Before you call me, try..."

Simple, but could easily save a few phone calls.

 

[inactionman]

Biggest thing is about admin rights! Make sure that a seperate account has them, and not the accounts the boss/wife uses. That way the crap should be kept to a minimum.

 

[xane]

In addition to what inactionman said, the best protection from rogue software is the Limited User account.

That said, there is a load of software that wont run without Administrator privileges, so you could have a separate Admin account but is blocked from the internet.

I do this for my Kids, they each have a Limited account and there is a general "Games" account that is Admin but internet blocked (would you believe they make kids software that needs an Admin account !).

 

[Chilly]

generally most software runs in restricted accounts, its installing that needs admin rights. make it clear to install in amdin and then get back to his smelly virus infected limited account.

 

[Shovel]

generally most software runs in restricted accounts

Furthermore, a lot of software which doesn't initially run properly in a Limited User Account can be fixed by making its installation directory writable (save-games are notoriously stored in program install locations, for example and old/crap programs tend to store settings files centrally too).

Unfortunately, Windows makes user permissions so very, very, very complicated that specifying how to set them up on a case-by-case basis is too hard for most mortal users.

What I have set up at home for my family is individual Limited User Accounts, with a 'Games' account each for when they really need it. Also, rather than using C:\Program Files\ to install software, I have one folder called 'Applications' and another called 'Games'. Games has write-permissions granted to all users, which inherits down onto any game that's installed. This seems to work quite well and means most games will still run with the Limited User account, whilst avoiding making application directories and the Windows directory vulnerable.

Of course individual Applications may still require their folder permissions changing, but I'm not aware that's ever come up for them (I've had to do it a few times on my personal machine, though).

 

[MYstIC G]

Just install the shit and manually create a system restore point. Whenever they ring up say "restore the PC" and voila... problem solved.

 

[phlash]

First thoughts:

Swap it for an X-Box? Take out the hard drive and boot from a BartPE CD? Run Beos on it?

Second thoughts:

Swap it for a Mac then say 'Sorry - I have no idea how it works'
Install Ubuntu then say...

OK - sorry, i'll be serious:

Be careful with too many 'protection' tools, if they keep popping up then they will end up disabled, and make sure everything is set for auto updates (including windows itself of course). Rename iexplorer.exe so it cannot accidentally be started (even by evil things like MSN which ignores your preferred browser settings). Definitely give them a crib sheet which lists how to get things done safely (such as installing new apps - Ben has good suggestions above). Some of my friends live and die by system restore points, so make sure there is plenty of space reserved for 'em and they know how to use them.