Make sure your desktop is locked when you are not at your workstation.
Adhere to the account. Password policy and expiry requirements. Generic User IDs and passwords should be changed periodically.