Interested on other people's thoughts on disabling on-access scanning for servers.
Rather than disabling scanning, you may find it better to either:
a) add lots of exclusions depending on server role (see MS TechNet site for recommended exclusions)
or
b) change to scan on write rather than scan on read