Does your Exchange Server have antivirus protection? If so, you don't need it on the clients who only use Exchange. Clients that retrieve emails from external POP servers are a different story. Having said that, I don't use the email protection at all - if there is a malicious attachment, the regular file protection will catch it when the attachment is saved or opened.