Silicon Technix

You can download a w7 security benchmark from https://benchmarks.cisecurity.org/en-us/?route=downloads.multiform.

In addition to the recommendations there you may want to:

1. Disable Teredo tunneling.

http://www.mydigitallife.info/how-to-disable-tcpipv6-teredo-tunneling-in-vista/.

2. Unbind Client for Microsoft Network and Printer and File sharing from all network adapters.

3. Disable Remote Desktop service.

4. Disable UPNP device host.

5. Disable ISCSI initiator.

6. Disable Computer Browser service.

7. Disable NetBios helper service.

8. Disable RRAS.

9. Disable remote registry service.

10. Move the firewall log from its default location and enable logging of all connections.

11. Enable process tracking in the local security policy.

12. Enable “User Account Control: Only elevate executable(s) that are signed” local security policy.

These are just a few things off the top of my head.
Best to run x64 version of Windows as the host.  The script kiddies are still targeting x86.

Of course, these recommendations are also applicable on Vista/XP OS.

You also may want to keep track of your BIOS, NIC and GPU firmware. 🙂
(If you know how)

CMOS De-Animator is a service utility for your system’s CMOS RAM. Unlike its predecessors, this new version includes a graphical interface and CMOS-backup options along with the “Clear CMOS” procedure, which was the original version’s only purpose. So, you can now backup the main CMOS settings to a file, or restore them later. The application supports all 32-bit and 64-bit Windows operating systems except Windows 95 and Windows NT 3.51; for these old systems, you have to use De-Animator’s previous version. You could possibly use it to reset BIOS Password from Windows itself!

CMOS De-Animator

CMOS De-Animator is not a tool for regular users but for system administrators or hardware engineers who find users who have forgot their CMOS password. For them, this tool is really helpful. Use it with care if you are a novice user

Downlaod CMOS De-Animator v2.0 here