1. Keep up with security patches 2. Turn off services you don't want to run (like IIS) 3. Install a personal firewall 4. Avoid using M$ stuff :-)