I only allow admin on that one. Won't affect IE-dependent apps, since they don't call that file. Will disable the use of IE as browser, which is arguably more secure.
Works on Vista too, albeit with a bit more of a hassle.
Also, when the box is directly attached to the intertubes, you might want to install a decent firewall. Shouldn't be needed when the box is behind any decent router. I'd recommend ZoneAlarm, but it's been a while since I needed a firewall for a Windows box. When it's in a network behind a router, I'd still recommend turning the Windows Firewall on.
This, together with Avast, lead me to the two most wanted F/OSS apps for Windows IMHO: AV with on-access scanning (ClamAV with a filesystem hook?) and a firewall package with a decent GUI (maybe something based on WinPcap?).
Can't really think of more regarding security. Utilities I miss on your list:
-Sun Java
-PDFCreator
-Flash
-Shockwave
Why only install the security updates? |
