In addition to the stuff you mentioned, for my mother in law I: removed her user's admin privileges install flashblock - one of the ones where you have to cli

In addition to the stuff you mentioned, for my mother in law I: removed her user's admin privileges install flashblock - one of the ones where you have to click on the video to make it run spent a long time explaining that you will never be chosen to win something, MS support never rings you to tell you have a virus, if something takes over the whole screen and tells you anything suspicious/implausible to press alt+f4 convinced her free music isnt worth the risk of downloading something that trashes the machine. installed spotify