0

I use a Server 2008 R2 Enterprise machine which is used solely to allow my customers to remotely connect using remote desktop connection. When they log in, the application is started and when the close the application they logged off the server. They never see a desktop (drive mapping is turned off my default, so they need to ask me for that feature if they need it) or anything other than my application.

I'm looking for recommendations on a basic antivirus program to protect the server. I'm currently using Microsoft Security Essentials. I'm not sure, given the limited access given to my customers if something more powerful than MSE is needed.

Thanks, Kevin

7
  • When you say Remote Desktop Connection, do you mean they connect to Terminal Services "RemoteApp"? Apr 29, 2014 at 17:35
  • Not remoteapp.. I have it setup so when they use Remote Desktop Connection on their PC. When the login, I run my application Apr 29, 2014 at 17:55
  • How/why did you install MSE on Windows Server 2008 R2? I can't find any info that states it's supported on Windows Server 2008 R2.
    – joeqwerty
    Apr 29, 2014 at 18:02
  • joeqwerty - I found a few posts that stated MSE works on 2008 R2.. I've been running MSE on the server for over a year without any problems Apr 29, 2014 at 18:10
  • I've never heard nor seen any evidence of this to be the case. MSSE checks the OS version/sku when installing and will not work on server OSs, only client versions. Are you certain you are not mistaken with the older Forefront (2010 and earlier) which look near identical except for the system tray icon?
    – David V
    Apr 29, 2014 at 18:59

1 Answer 1

1

I used to manage a decent size (ranged from 100-200 computers/users at a time depending on the economy) health organization that had a large Remote Desktop Services environment. We used 3 RDSH servers, 1 RD Broker, and 1 RD Gateway. All virtual machines and all roles were separate, not that that matters. We did a lot of research on antivirus providers because of how important the right one was to us since it would be affecting a large portion of the user base. Here is my real world experience:

1) MSE is ok, but not great. It serves a very basic purpose in protecting against some threats but isn't great from a mass management standpoint. What I mean by this, is that it doesn't provide a very granular management system to be able to exclude certain locations/items on the OS or give very much control over individual policies.

2) We ended up going with GFI's Vipre for Business and I'd highly recommend it to you for several reasons:

a) It can exclude things from scanning all the way from large directories/folders, all the way down to individual files

b) It can apply multiple policies per user/computer (I know you only have 1 server, but in your case you've got multiple users) and these policies are very granular; they have a lot of tweaking you can do to get just the right result.

c) Vipre is very affordable and I remember us paying somewhere around 78 cents per license

d) Their tech support is not only mainlaind (USA) support, but also very knowledgeable and very easy to work with

e) They tailor one of their policies/packages specifically for Terminal/Remote Desktop environments and enhanced performance for that

You may not NEED something more than MSE as you mentioned in your original post, but you will have better results in the long run and a lot more control over what you want your AV to do.

Please let me know if you need any further info.

7
  • Brad - great post.. I will look into Vipre, again thanks for insight. Apr 29, 2014 at 19:17
  • 1
    Any time my friend. Please let me know if you do decide to use it and I can help with my past experience and give you insight as to which configs to avoid and/or use. Apr 29, 2014 at 19:54
  • Brad-Looking for a little more info.. is it possible to talk via email or private message? May 1, 2014 at 14:50
  • Of course it is. I'm in Microsoft training all day today and tomorrow, but let's do this, I'll give you my email here and you can email me your phone number then I'll ring you if that works. Email is: bradjbouchard [at] gmail May 1, 2014 at 14:54
  • great..thanks I'll send you an email in just a few May 1, 2014 at 14:58

Not the answer you're looking for? Browse other questions tagged .