• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 222
  • Last Modified:

AntiVirus for Win2000 Server, XP Laptops (not connected to server)

I am looking for advice regarding small business antivirus software.  We currently have Symantec AntiVirus Corporate Edition which is up for renewal.  However, I'm not sure if it is the best choice for our situation, which is: we have a Windows 2000 Small Business Server running Exchange. There are a couple users on the LAN connected to this server but most of our users are in the field and do not connect to the server at all, except through Outlook Web Access to check and send email. These users laptop's are setup so they have limited accounts (XP).
So, is the client/server functionality of Corporate Edition something we don't need and shouldn't be paying for?
Are there disadvantages to running Corporate Edition on user's laptops with limited accounts?
What would be the best fit for this situation?
With the maintenance agreement up for renewal I am now facing the possibility of having to manually install new licenses on each user's laptop (and my user's are spread over an area of maybe 100 mile radius, which would mean a lot of driving!). There must be a better way!
Any help would be appreciated!

Michael Vasilevsky
Michael Vasilevsky
  • 2
2 Solutions
Rich RumbleSecurity SamuraiCommented:
You can deploy most software remotely, and if need be use RunAs to get users a higher privledge to install the programs. but programs like VNC and RemoteDesktop can help you to log-in remotely and do it as an admin.
I prefer McAfee over norton for a few reasons- it has buffer overflow protection, as well as lot's of spy-ware detection signatures. McAfee also finds more programs that could be malicious, such as JohnTheRipper, L0pht Crack, Cain&Abel, KerbSniff and many many more that Norton totally misses.
McAfee 8.0i is what we run at our corporation and what I give all my clients in my security business. McAfee even has some great solutions for Email servers, such as webmail clients and M$ exchange. But in my security business I use ClamAv exclusivly- which is a free opensource project that works very well.

mcafee makes it easy to setup scheduled updates, and system scan's. Norton's product does this very well also... it's really just a preference- i think mcafee is easier to use, and is more robust than nortons products- but I haven't tried the new stuff from norton...
Michael VasilevskySolutions ArchitectAuthor Commented:
Unfortunately remote deploy is not an option for me because some users never or rarely connect to a broadband internet connection and no one has remote access programs like VNC installed...
For the server I would recommend Trend.  They have a product called Serverprotect, which will protect the OS.  And a product called ScanMail for Exchange, for email scanning.  I have used both for a long time and feel they are the best on the market.
NOTE: Be sure to read the specific exclusions for ServerProtect installed on an Exchange server, Trend has this documented and their support can explain further.

As for the remote laptops, you should choose something that will run withour central administration.  Something that can automatically download and install the latest update.  McAfee and Norton products do this well (I prefer Norton) and I use both everyday.  The only bad part is that you will have to be on the laptop to install, config.  And you will not be able to monitor the "status" of the AV app remotely (central administration).

As for the install for the laptops.  I would use something like VNC.  The setup is not hard, and you would walk your users thru the install over the phone fairly easily.  It would work for the install of the software and save you driving.  If you are worried about security, don't register the VNC server as a service.  This will also help with future troublshooting, you can just have the users fire up VNC, log in and see what they see - show them how to do "stuff".  but that's just my 2 cents.

I hope this is what you were looking for.

Good Luck.


One more thing.  VNC works fine via a dial-up internet connection.  It might be a bit slow, but it's better than driving.

Featured Post

Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now