I run Windows as a guest with vga passthrough and completely disable networking (though a very strict firewall could also work, e.g. For online games).