Is there a corporate solution to maintain/update anti-virus software for WinCE devices? The security team is concerned about these devices connecting to the network and are requiring AV. A subquestion might be: is this a credible risk?
I did find Microsoft's SMS 2003 Device Management feature pack, but I don't think it supports any AV management.