How to harden Windows



Can you guys help me with hardening Windows using SRP and Applocker? I'm trying to learn this so I can help some friends of mine. What type of rules do I need to make to help block malware? Is it better or easier to just install CryptoPrevent since it creates alot of SRP rules?
Is SRP/AL about the same from XP to 10?