nick76 said:with Vipre you don't have to install Java anywhere. And it's really easy to manage, but I'm quite unsure about protection
nick76 said:nope, domain users cannot install/uninstall software, they cannot disable av, and they cannot download exe, cmd, vbs...... They don't have access to removable devices or CD ROM, and everything between inside and outside is strictly filtered. The problem is about some IDIOTS users who have privileges as local admin. Conficker has been inserted with one of these users. but I cannot deny them as local admin. :-(
nick76 said:I'm planning to add EMET on all internet enabled wks. I'm testing the resource usage, because normally users tend to be very annoying with wks performances...