Would we need anti-virus software on public computers if we are using Deep Freeze and Anti-Executable?

We have about 150 public computers and we currently run Deep Freeze with Norton Antivirus. The problem is keeping norton up to date while using deep freeze and running scans. Although we followed the instructions that deep freeze puts out on how to run them side by side we still run in to some machines that will not update correctly.

So I got to wondering do we really even need an anti-virus software on these machines due to the fact we are running Deep Freeze? We also recently purchased Anti-Exec from Faronics as well and plan to implement that on the machines. So between the two products do we really need an antivirus? why or why not?
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

The problem is Deep Freeze will fix the machine, but only when you restart it.  Therefore,
if a person gets a virus on the machine and other people use it (with a floppy
or to send a file) before the problem is noticed, they may spread the virus. This is especially true for microsoft word or if they are saving other things and sharing them.

The other problems are if it is a worm it could work its way through your network until you reboot therefore machines without deep freeze could be affected.

Additionally if you are using roaming user profiles or have user profiles so that for instance my documents is mapped back to a server the server would still have to have protection on it and a virus on the workstation computer could actively attack the server until the workstation is rebooted that contains the virus. Which means if it breaks through to the server your network is now comprimised.

So all in all I would advise against still  using anti virus on those workstations.

you may also want to look at this article it explains the differences and nuances of programs like Anti-Exec

An example would be you could whitelist Adobe Acrobat reader later on a security hole is discovered through a buffer overflow attack that gives elevated permissions to the system. Since it is whitelisted your anti-exec is going to let it through.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Absolutely you still need Norton.  Deep Freeze sets the PC back to the baseline config, meaning you get a virus and you restore it with deep freeze you will lose things on the PC.  Anti-exec just stops executables, there are other ways to get viruses then just running executables.  Big mistake to take AV off.
Sorry I mistyped this line should  obviously it made no sense with my argument being you still need anti virus to say... "So all in all I would advise against still  using anti virus on those workstations."

that line was completely mistyped it should have read

"So all in all I would advise against not using anti virus on those workstations."

In other words yes absoutely keep your anti virus! for the reasons I stated above
JDL_TechAuthor Commented:
Exactly what I was looking for thank you for your comments
thank you... sorry I typed it wrong the first time. I probably could have worded it better.
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Anti-Virus Apps

From novice to tech pro — start learning today.