In one case the api I worked on used encrypted IDs on the way out to the client, and decrypted them on the way back to the db. Even when multiple clients referred to the same resource, they would see different public IDs, but any instance of the API could reach the underlying value from those public values.
A clean Windows install is a must, as others mentionted.
As for hardware - there are really two options. Either a ThinkPad (whichever flavour suits you) or a MacBook Pro with Windows (yes, it works better than most). Hint: the MBP will probably be cheaper, based on your configuration.