Noob question: VLANs? for Windows 2000/XP/7 isolation

[Wasmachineman_NL]

I work a lot with older Dell Precisions that run Windows 2000/XP/7, and with that comes my question: how can I isolate them from my network so my home network doesn't get raped when one of my Precisions gets compromised? VLANs?

 

[schujj07]

VLAN should work just make sure that your firewall won't allow them to communicate across VLANs, I would also have them on a separate subnet just as added security. Otherwise you can always have a physical switch and subnet for them.

 

[Wasmachineman_NL]

VLAN should work just make sure that your firewall won't allow them to communicate across VLANs, I would also have them on a separate subnet just as added security. Otherwise you can always have a physical switch and subnet for them.

Or, better yet: don't leave them running/connected to the internet 24/7?