[taxcontrol]

How to fix

1) install all computers with a current anti-virus package and clean all systems. If the system can't be cleaned, reinstall.
2) protect your email server with an anti-viurs package
3) guard your email server with a pre-filter (ironmail)
4) install all computers with a desktop firewall software (recommend Cisco's CSA product)
5) proxy all Internet access through a central host to log access and block unacceptable sites.
6) train teachers to not allow students on the computers
7) train teachers to not bring in software from home
8) train teachers to not open email unless they know where it came from and the contents BEFORE they open the files.

[Arkinsaw]

How to fix

Yes, but can you do all that for under $50.00? If not, the State of Arkansas would prefer just to take its chances.

[TheBattman]

Most of those suggestions have been implemented at our location.....

#8 is the #1 reason for the problem. And it's the same teachers every time - they open every single email that hits their computer - and bang.

Add to that they they refuse to follow directions to update the AV software (AVG) regularly.

[LasVegasMac]

6) train teachers to not allow students on the computers 7) train teachers to not bring in software from home 8) train teachers to not open email unless they know where it came from and the contents BEFORE they open the files.

We take the approach of not relying too much on the user. Train them ? I don't know about that. Educate, maybe. One big plus for us is that you cannot bring software into the building.

Good point on #3, we are actively looking at that solution to take some load off the mail server.

You don't mention DMZ's and intrusion detection protection - all "layers" in the scheme.

LVM