• Right-click on the task bar and select "Properties."
• Click on the Start Menu tab.
• Uncheck "Store and display a list of recently opened files."
• Uncheck "Store and display a list of recently opened programs."
• Click "OK."

4. Get two-way firewall protection

No desktop should be without a personal firewall, but even if the Security Center says you're protected, you may not be. The Windows Firewall within Vista blocks all incoming traffic that might be malicious or suspicious -- and that's good. But outbound protection is not enabled by default. That's a dangerous situation if some new malicious software finds its way onto your PC.

Microsoft did include the tools for Windows Vista to have a true two-way firewall, but finding the setting is a little complicated. (Hint: Don't go looking the Windows Firewall settings dialog box.)

To get two-way firewall protection in Windows Vista, do the following:

• Click on the Start button; in the search space, type "wf.msc" and press Enter.
• Click on the Windows Firewall with Advanced Security icon. This management interface displays the inbound and outbound rules.
• Click on Windows Firewalls Properties. You should now see a dialog box with several tabs.
• For each profile -- Domain, Private and Public -- change the setting to Block, and then click OK.

Even if you do this tweak, I recommend adding a more robust third-party firewall. I suggest either Comodo Firewall Pro or ZoneAlarm, both of which are free and fare very well in independent firewall testing.

5. Lock out unwanted guests

If you share your computer with others -- and even if you don't -- Windows Vista includes a neat way to keep unwanted guests from guessing your systems administrator password. When you set up users and declare one user as administrator with full privileges, Windows Vista allows outsiders unlimited guesses at the password you chose. Here's how to limit the guesses.

• Click Start, then type "Local Security Policy."
• Click Account Lockout Policy.
• Choose Account Lockout Threshold.
• At the prompt, enter the number of invalid log-ins you'll accept (say, three).
• Click OK and close.

6. Now audit your attackers

With the Account Lockout policy in place, you can now enable auditing to see any account attacks. To turn on auditing for failed log-on events, do the following:

• Click the Start button, type "secpol.msc," and click the secpol icon.
• Click on Local Policies and then Audit Policy.
• Right-click on "Audit account log-on events policy," and select Properties.
• Check the Failure box, and click OK.
• Right-click on "Audit log-on events policy" and select Properties.
• Check the Failure box and click OK.
• Close the Local Security Policy window.