Windows Vista Security Tweaks

Advanced Windows Firewall: Turn on outbound filtering
Change Remote Desktop RDP Port
Create an Account Lockout Policy
Disable Java Browser Plugins for Improved Security
Disable UAC (User Account Control)
Disable USB storage device write (make them read-only)
Disable User Account Control (UAC) only for Administrators
Enable Two-Factor Authentication on your Microsoft Account
How To Protect IE, Chrome and Firefox from the POODLE SSL v3 Exploit
Improve Security by Updating Third-Party Apps
Make Mapped Network Drives Work with UAC Elevated Apps
Make Private Browsing More Private
Remove Personal Information from Office Documents
Secure Browsing Over Public Networks
Start Menu Privacy Tweaks
Turn on auditing to monitor account attacks
Tweak User Account Control (UAC) with Security Policies
Use BitLocker Drive Encryption without TPM chip
Virtualization on Windows
Windows Vista Group Policy Reference