Malware

Howdy all.

I am looking for some "best practices" for how to best configure the forced AV policies to the end user community. In particular, I am looking for practices for configuring the local hard drive scans of workstations but am interesting in reading all on the topic I can. We use a managed approach (CA eTrust) that allows us administrators to control the policies pushed down to clients.

I am interested in your own comments and hopefully some links to sites that discuss the best practices. I have not found what I am looking for on my own. Things like how policy would be different for workstations vs laptops, stuff like that.

Thanks,
Mr E