Stop and Disable the "Server" service. (run a startup script that stops / disables it at each reboot too) - Unbind "File & Print Sharing" from your wireless and wired adapter. Only Client for MS networks and IPV4 are needed for most PC's) - Run Malwarebytes on your workstation (turn off all the cloud submission stuff). - Delete any saved wifi networks from your profile that you don't recognize. - Turn on the Windows firewall and have it deny all inbound connections in all profiles. If you have a hardware firewall at home (provided by your ISP) make sure that is turned on too with all inbound ports blocked. - Make sure UAC is turned on. - Disable the built-in Administrator account, guest account, and any other stuff you find in Computer Management - Disable app Windows Store app permissions in "PC Settings / Privacy). Basically everything in there can be turned off for non domain member PC's.