Do you run antivirus on your Windows servers?

Yes, although for the most part they are configured to scan for viruses overnight with real-time file protection disabled, the exceptions are:

  • File servers - Set to scan on write only. Full nightly scan.
  • Sharepoint - No current anti-virus, waiting on Sophos for SharePoint to come out of beta.
  • Exchange - Exchange specific anti-virus soloution. Overnight scans exclude data stores.
  • Application Servers - SQL Data stores excluded from overnight scans.
  • AD/DC/DHCP - Overnight scan set to exclude service specific data files and logs

This sums up my opinion.