IN addition to that.
Make sure they are using FireFox
Get AdBlock Plus along with the Adblock Filterset.G Updater (updated constantly blocking new and new ads).
Nod32 with NODEnabler (legal what
)
If I was super paranoid I'd say use DeepFreeze but that's just stupid