Office Computers

I have four office computers on a network running Vista Business and would like your advice on what to install in terms of security. At the moment we only have Windows Firewall and A-Squared. Unfortunately you could consider some of the users to be somewhat slack when it comes to security, they'll open any attachment or file off the internet without any consideration dispite being told not to. The users are on limited accounts but I feel more could be done to secure the PCs. The system does need to be idiot-proof for the user and in the past the users just click "accept" on any firewall message or AV message.

I was thinking just install Kaspersky Internet Security 2010 and have done? I was also considering Anti-Executable to go with Kaspersky but its too expensive at £23 per PC. There are better solutions for far less.

Whats your take?

 

Well in stead of anti-executable, I may promote my own tweak (just implement first 3 posts) https://www.wilderssecurity.com/showthread.php?t=262475

When running LUA one can't download executable type of files.

Why don't you use Software Restriction Policy on Vista Business? Ask some experienced guys over here to enforce a GPO-template (above tweak is also part of group policy editor, so you can two flies with one strike)

Info
http://www.petri.co.il/working_with_group_policy.htm
http://technet.microsoft.com/en-us/library/bb742376.aspx
http://technet.microsoft.com/en-us/library/cc787386(WS.10).aspx

 

Wouldn't running a GPO mean configuring it manually on each machine? If so then thats too much of a pain.