I wrote this out yesterday afternoon after being asked the same thing 3 times in the same day.
It's a word doc with a quick guide to having and keeping a 'relatively' secure and clean machine.

It's not intended to be exhaustive but it might be useful to give to users when you don't have time to deal with them yourself.

Feel free to change it and use it as you wish.