How to make preventive maintenance of the server and workstations?

Question

System administration

Good afternoon. I wrote code for seven years. Here, due to circumstances, I got a job in a state organization (which previously made 3 sites) as a system administrator, previously there was little experience of an enikey worker. There is not a lot of work, but I want to do it the right way. In the arsenal 1 server (very weak, Pentium 4 (2.7), 512 RAM, windows server 2003, 160Gb, mainly used for authorization logs, Internet traffic analysis and as a file server), and 25 workstations with an average of 2 GB of RAM and win7. Router, Wi-Fi router, several network printers.
The organization organizes educational programs and processes, there is a classroom.
As far as I understood from the previous admin, it was hard to wait for something, and there were no preventive measures, cleaning the server from dust. The server works around the clock, not turning off for weeks. Should it be done and how often?
Since this profession is new for me, and I myself am a machinist, and here everything is on Windows, I want to hear some recommendations for the prevention of equipment, and recommendations on the key points of this profession, which I may not even mean now. (pirated software, Linuxization of educational institutions, plans, reports, etc.)

Answer 1

1) Deprive users of admin rights.
2) Install anti-virus programs
3) Cleaning the server is needed, preferably after hours :)
4) Backups, backups and more backups. 5) You
can read https://habrahabr.ru/post/266911/ and in general the hub https://habrahabr.ru/hub/sys_admin/ /262149/

Answer 2

As far as I understood from the previous admin, it was hard to wait for something, and there were no preventive measures, cleaning the server from dust. The server works around the clock, not turning off for weeks. Should it be done and how often?

If the hardware is old and has not been looked after, then turning it off can result in non-working hardware.
From your topic it is not entirely clear what kind of software is used on workstations. It's one thing if documents are stored there that people constantly work with, or critical data is not there. If the second, I would do this: I would reinstall the OS on each computer, install the necessary software, settings, and then, by deleting the HDD controller drivers, I would make an image of this configured OS as an acronis and smash it across these same computers. And this can be done at least once a week, since it does not take much time, and the image can be put on the network. Then it would be possible to deploy a full-fledged server for these cases.