In my Vacational school they have old Macs (OS X 10.6.8) and some newer.
They have Intego Virus Barrier X5 (Newest is version 7 or 2013) with an outdated license, and the
Windows PCs are protected with Avira Free, PCTools ThreatFire and cranked up Windows Security settings and Firewall.
And you automatically boot into a standard user account via console, no access to Admin accounts.