One thing I absolutely recommend *against* is leaving information on the employee's voice mail, assuming that only they will know the PIN/password.
This is a well-known entry point for companies that specialize in "social engineering" style penetration tests. Having pre-arranged passwords and/or challenge/responses would be best: employee number office location/office number what is the date of the next/last paycheck? In general, I believe that calling them back at a pre-arranged phone number is quite good, too. If you are all in a single small area, you can even use "what photos are on your desk in your office?" or "what poster is outside your office?" and have the person in the help desk go take a look :-) --tep _______________________________________________ Discuss mailing list [email protected] https://lists.lopsa.org/cgi-bin/mailman/listinfo/discuss This list provided by the League of Professional System Administrators http://lopsa.org/
