What elements are needed in a workstation domain policy regarding use of antivirus and malicious software prevention tools?

The server should be able to block unauthorized access, a good firewall but still, enable those authorized to have an access. However, there should be security on vulnerable parts of the system that may lead to corruption and easy access to data thieves.