I'd recommend using ADNM on any network of 3 or more machines.
And yes, it is usually advisable to run the Outlook shield on the workstations as well (not only Exchange-level protection) - because of encrypted emails and other potential threats that cannot be effectively stopped on the server.
Thanks
Vlk