This is the configuration I have used to set up home PCs to be resistant to the kinds of bugs and malware and spyware that seem to get installed over time on a windows PC. This is in combination with using limited accounts for everyone who uses the PC.
The quick overview is:
- Partition hard disk into 3 partitions: