Here's a great link I'll be giving my family: www.microsoft.com/protect

It will automatically turn on the Windows Firewall and setup the Automatic Updates to download and install.  This will mean one less trip for me to everyone's house to install Windows SP2!