A fairly simple one. We have a server, we should be doing a scheduled scan. The scan uses a scheduled task which requires a user account, what permissions should that account have? We don't fancy leaving it to run as an administrator.
EDIT: I have set up a user group called "AV Scanner" (or somesuch) which is basically a vanilla user with the power to delete anything. So far this seems to have worked out fine. Could anyone tell me of a scenario where this would prove to be a problem? So far we have no intrusions that I can see but maybe if there were a virus or similar this policy would fail. Does anyone have any further info?