Help setting up general use computer for work

[Sanders0492]

The desktop computer we have set up for employees to use (for work related searches) keeps getting obliterated by malware and this time a super nasty virus (we've tried multiple anti-virus, from free to paid).

I'm pushing the owner to allow me to set up the computer this go around and I want to make it as secure as possible. Obviously I need to set a password on the admin account and create a non-admin account for the employees to share. I also am trying different antivirus this time.

What other things should I do? What setting should I change so that they can do whatever they need, but also can't get the computer infected? Also I'll be looking into good privacy settings for browsers and such.

 

[esco_sid]

Just put linux on it in guest mode if its simple browsing and searches they will have difficulty breaking that beast.

 

[Sanders0492]

That would be my preference, but that's not an option. I would be required to use Windows 10.

 

[esco_sid]

i would look here https://technet.microsoft.com/en-us/itpro/windows/manage/lock-down-windows-10

Not sure how your network is set up but with AD you can set pretty strict policy on what users can or cant do.

 

[Sanders0492]

Thanks! I'll read that in a moment.