I work in a school environment running mostly Windows XP where students bring their thumb drives, plug them in do whatever they want. How do I prevent viruses from wreaking havoc on a 12 year old OS? Well, by default, I simply setup a restricted account and that's it.