Every enterprise computer that is running Windows OS needs antivirus software. In the best case, install such software on every server and client machine communicating with the domain controllers. It is best to stop malware as soon as possible, perhaps at the firewall or the client machine where it was first installed. As a result, the malware is stopped before it may affect the infrastructure systems that the clients rely on.