Anti-spyware strategy

[ITWombat]

There's been alot of coverage on what to do for antivirus solutions.
What do you do for anti spyware in the school environment?

Do you include aniti spywre software in your standard builds? If so do you just have the one app or more than one. Do you go for free apps(e.g. SpyBot, AdWare, MS AntiSpyware Beta) or do you subscribe to a payed-for service like Symantec?

What do you do for teacher laptops other than just pray?

[Ric_]

This is one reason for my giving limited access to laptops. Forcing users to run with very limited priviledges prevents much of the malicious software installing in the first place.

Anti-spyware software is very expensive IMHO and no one product on the market is 100% at keeping your machine clean.

Using a firewall to limit access to the Internet also helps - blocking ports and authentication can prevent any nasty traffic.

[webman]

We don't use any. But that's because our network restrictions don't allow pupils or staff to run executables unless we say so. Laptops for Teachers are just that - the teachers. Most have limited accounts and are rarely plugged into the LAN.

[john]

Don't use anything on machines as yet, but a few anti-v companys are putting Anti-Spyware stuff in as part of there stuff. I know Trend Micro has in-built spyware protection, and its very good, so the others will follow eventually.

[Geoff]

Dansguardian as the web filter blocks loads of stuff.
Windows Antispyware deployed via AD.
Spybot S&D and SpywareGuard on the Ghost Images.
Restrictive user permission for everyone.

[mark]

Blocking is pretty thorough although I have Spybot: just the live protect, Spywareguard and Spywareblaster. Ditched MS Antispyware.

[Geoff]

Windows Defender does pick things up. It was also a doddle to install so I figured I might as well.

[Gatt]

We use Mcafee 8 for AV, but no AV - but again this is due to extremely tight SRP in AD..

Still working on a list of the progs windows needs to run the OS so i dont need to keep System32 & Program Files open. Even though the kids cant access the C: Drive - I'm still looking to lock it down as tight as I can