Looking for a guide/info on how to lock down Windows 7. It's a virtual machine (ESXi) that will act as my media center. It will have folders shared out that other PC's on my LAN will stream movies/videos from. And it will record OTA TV shows. Other than this, the PC will never be used for accessing the Internet, checking email, using Office or anything else. It'll be an important PC that I'd like to give 99% uptime for the next several years, even after OS updates stop being offered. For reasons not necessary in this post, I will let you know now not to bother suggesting Win8/10/other. Please ignore those suggestions and help me to lock down Win7 as much as possible without interfering with the shared (read-only) folders and ability to record OTA from my LAN connected HDHomeRun DVR device.