Does Forefront for Exchange Server 2010 cover the entire windows server or just the Exchange 2010 installation on a Windows 2008 R2 server? Do we need to run an additional Forefront product for full protection on the Windows server?
ForeFront for Exchange 2010 does not protect the operating system from evil, just Exchange itself. You should run the same ForeFront package you're running on your other servers. Just be sure to add the Exchange directories to the Do Not Scan list.