Mid 2014 basic windows client hardening checklist
This is the basic list, not anything fancy:
Step 1. Remove crappy software first
Step 2. Add good software second-
Secunia PSI 3.0
Some paid antivirus or MS defender. Do not do free antivirus, if you believe the conspiracy theory crap go to another website. You are like the anti vaccine people.
Install MVPS hosts file
Set up backup software – Mozy, something.
Set up file history on an external drive
If the user is smart enough, have a user user and an admin user. Remove the ability for the admin user to log in.