Actually, we've locked down IE and the terminal server so much using group
policy, that we haven't had a need for an anti-spyware program. We have been
testing terminal server in a college student lab environment since June, and
so far no spyware infections...and if you know college students, you'll know
that they tend to go to some bizarre sites. The only scare is that several
students managed to start a software installation. Only a directory in the
Programs Files folder with some of the program's components were created, but
the rest of the installation failed due to a lack of permissions. We are
still trying to figure out how that was able to happen. We do keep a ghost
image of the terminal server at the ready in case the server ever goes south.
No user data is kept on the server so it's not an issue to re-image the
entire server...only takes about 7 minutes.
Steve
