Anti-virus settings

[Jobos]

I’m in the process of setting-up the anti-virus software and was wondering how other schools set their scan preferences on servers and workstations.

I’ve heard it said that realtime scanning shouldn’t be used on servers owing to the performance hit and I’ve also heard it said that workstations shouldn’t scan network drives.

What policies have you got in regards to realtime scanning?

[imiddleton25]

Yes we turn of the on access scanning on servers and only scan physical drives on the workstations.
Network drives are all on the servers anyway ,so get checked there. We set are machines to do a scan overnight and then run psshutdown to turn them off. Otherwise users moan computers are running too slow.

[srochford]

that doesn't make sense??

You want to turn off scanning of network drives everywhere but turn on local on-access scanning everywhere.

that way if a user accesses something on C: (eg in temp internet files) the local workstation picks it up and if they access something on a network drive then the server picks it up as a local access.

You might also want to look at Virus scanning recommendations for computers that are running Windows Server 2003, Windows 2000, Windows XP, or Windows Vista for info on best practice for scanning workstations and servers.

[pete]

You can also distinguish between scan on read and scan on write with most av, which can give a performance boost depending on your needs.

[SOSAGES]

just beaware that on the server you shouldnt scan certain files of folders as this can really upset things.