I have been hired at a start-up where I seem to have become the de-facto admin despite being hired to do application support (to be fair I do have a background as an all-rounder).
Amongst the interesting things I have found is a lack on anti-virus on the domain's Microsoft servers the argument being that they are not the point on ingress therefore as long as all the ingress point are covered, protection for them is not needed.
Whilst my knee-jerk reaction is too blanket install (eset in our case) across all of machines, it got me thinking, what is my justification for the licence and performance cost?