I'm running a POS system with 80-90 Windows clients, Windows 7.0 (and a few with XP)
There is no direct Internet access, and no PC keyboard on the clients. (only when serviced)
The POS terminals uses different network shares for file exchange (basic Windows security)
The POS clients are placed at the same IP segment together with other protected PC's with Windows 7.
How should i protect my POS terminals?
By the way, POS is "Point of sale" and the one you see at the register in your local Supermarket