My department manages some 1,400 PCs, MACs, and Solaris Sunblades. We never turn machines off, especially the MACs and Solaris workstations. Users do not have permission to shutdown workstations, and when the Solaris workstations reboot, the require a BIOS boot password. This stops unfriendly users from trying to boot the workstation to a CD, and then hacking.
In responce to your question, I do not think it matters anymore with regards to turning off machines. Actually, with windows machines, turning them off and then on again will usually do wonders.
As with windows security, do not use IE unless you absolutely have to (only for windows updates) for everything else, run mozilla firefox 1. 0 (available from
http://www.mozilla.org). Ensure that you have some type of antivirus software, such as panda or NAV and keep the definitions up-to-date, also, scan the local drives for viruses daily. Get some type of ad-ware removal tool, such as
http://www.lavasoft.de and
http://www.spybot.info. Finally, traverse the Internet with care. Programs such as WinMX and other file sharing programs leave your computer un-safe. Do not foget, many sites, such as porn sites, will attempt to plant viruses, ad-ware, and spy-ware on your computers. Solution, either do not look at it, or protect your self. Utilizing these products will not guarentee that your Windows PC will be invincable, but it can aid in preventing a premature death.
If you have a broadband Internet connection, you should seriously consider a physical hardware firewall. I would not depend upon the Windows XP firewall for anything, and I still do not trust products such as BlackIce and Symantec Firewall. Nothing takes the place of a hardware firewall. Also, get a firewall that supports at a minimum SPI (Stateful Packet Inspection). This aids in assuing that the inbound frames are what you actually requested on the Internet. Your firewall should be setup to have no open inbound ports, unless you are intentionally hosting some service. Also, deny any WAN requests, such as ICMP request. By not responding to anything on the WAN connection, you reduce your Internet footprint.
Or, if you can consider installing and running some version of Linux. I usually traverse the internet using either Linux (home), or Solaris 5. 9(work) with Firefox 1 as my browser.
-Rich