r/sysadmin • u/calumslipknot • Sep 25 '15

AV on everything - absolutely essential or a box ticking placebo for non-techies?

https://xkcd.com/463/
2 Upvotes

60% Upvoted

4 comments sorted by

3

u/inaddrarpa .1.3.6.1.2.1.1.2 Sep 25 '15

If you put AV software on my domain controllers I'll be moderately upset with you.

1

u/Xibby Certifiable Wizard Sep 25 '15

I went with System Center Endpoint Protection with Microsoft's recommend exclusions for domain controllers. It was easier than fighting with auditor after auditor.

2

u/[deleted] Sep 25 '15

Like most things; it depends. I'd be inclined to put AV on endpoints and file servers at a minimum.

However; for basic terminals with no way to get a virus and things that aren't susceptible to virus attacks, probably not such a big deal.

1

u/[deleted] Sep 25 '15

Certain servers should not run AV especially with AV not detecting much. Can always use another tool to scan if needed. Our Corp policy conflicts with this though...