I'm setting up a laptop running win vista ultimate for a friend who will use it in a small print shop. It'll be connected to a big Minolta office printer copier. The shop owner will be inserting customer USB sticks and printing docs etc.
How can I minimize the likelyhood of viruses and malware getting loaded when the USB sticks are used?
UAC is enabled and I setup a none admin user account for him to use when printing. It's currently running AVG 2012 and all win updates are done.
Any tips on how to really lock this account and machine down to reduce risks when the shop owner is doing this printing from USBs?