Re: Centrally managed antivirus

[Lukas Beeler <lukas.beeler@xxxxxxxxxxxxxxxx>]

On Mon, Aug 9, 2010 at 18:05, Jeff Crosby <jlcrosby@xxxxxxxxxxxxxxxx> wrote:
> Buying 5 licenses _initially_ is no big deal, as long as we can buy them
> singly after that.

Yep.

> When you speak of administering via Group Policy, this means the PCs/servers
> must be joined to the domain, correct?

They should be. You can configure Forefront using local group
policies, but they're messy. Symantec and McAfee solutions deal with
non-domain joined machines much better than the Microsoft solution.

> ÂOur sales reps laptops have never
> been joined to the domain. ÂThose laptops will soon be Win7 Home Premium
> which I don't think _can_ be joined to a domain. ÂIn any case, as long as
> there is a central admin server, there's a way around that.

You can upgrade those to Win7 Pro (Anytime Upgrade, Retail) or Win 7
Ent (Windows 7 Upgrade + SA). The latter is more expensive, but gives
you the option to use DirectAccess (if you have the necessary
infrastructure) and BitLocker (if the Laptop has a TPM, or you're
willing to deal with the USB-Stick solution). BitLocker is great for
laptops, since it gives you full disk encryption without hassles, at a
low cost (it's part of Win 7 enterprise).