You will of course need to protect your machines with a firewall and with virus scanning, and require any user accessing the machines remotely (if you allow this at all) to login, giving their user ID and password.
It's advisable to have the latest version of your operating system - the security features are usually improved at each upgrade.