What Are You Doing Right Now

RojoLoco

Composing a company wide email about how to make sure macros are disabled inside MS Office.

dafyre

@RojoLoco said in What Are You Doing Right Now:

Composing a company wide email about how to make sure macros are disabled inside MS Office.

Do we want to know why you are needing to do this?

RojoLoco

@dafyre said in What Are You Doing Right Now:

@RojoLoco said in What Are You Doing Right Now:

Composing a company wide email about how to make sure macros are disabled inside MS Office.

Do we want to know why you are needing to do this?

It's just to proactively double check. We have lots of macro spam in the filter, and this will help combat them if any make it through. I included a preamble about why we're blocking them and a reminder to never click any unknown links, etc.

Dashrender

@RojoLoco said in What Are You Doing Right Now:

Composing a company wide email about how to make sure macros are disabled inside MS Office.

Why? Use Group Policy and just do it.

RojoLoco

@Dashrender said in What Are You Doing Right Now:

@RojoLoco said in What Are You Doing Right Now:

Composing a company wide email about how to make sure macros are disabled inside MS Office.

Why? Use Group Policy and just do it.

One malformed GPO by my predecessor made the bosses leery of group policy. I've got them basically convinced that it isn't evil, but it's an uphill battle. And I have every confidence that the users here can manage this one.

Dashrender

@RojoLoco said in What Are You Doing Right Now:

a reminder to never click any unknown links, etc.

Sadly this isn't very useful either since you can hide the real link something is going to in most email clients.

Sure, but it only takes on person turning it back on to hose your whole system.

of course GPs can mess things up.. that's why you test things like this in a small sample group of users first

RojoLoco

@Dashrender said in What Are You Doing Right Now:

@RojoLoco said in What Are You Doing Right Now:

a reminder to never click any unknown links, etc.

Sadly this isn't very useful either since you can hide the real link something is going to in most email clients.

Sure, but it only takes on person turning it back on to hose your whole system.

of course GPs can mess things up.. that's why you test things like this in a small sample group of users first

I've been testing things successfully. I think the one that went badly was really like 20 different policies in one, untested, and poorly chosen. Since macros are off by default, I'm fairly sure that everyone will have it disabled already. But I'd rather send the email than have to log into every machine as the user.

MattSpeller

Best suggestions so far for the message we replaced virused attachments with:

WARNING: THIS ATTACHMENT WAS DETECTED TO HAVE A VIRUS. FOR SYSTEM DECONTAMINATION STAND UP AND SHAKE YOUR MOUSE VIOLENTLY.

UPON OPENING THIS FILE YOU ARE REQUIRED TO DECONTAMINATE THE COMPUTER. PLEASE COMPLETE THE FOLLOWING STEPS CAREFULLY. YOU WILL NEED TO STAND UP FROM YOUR DESK AND PUT YOUR LEFT FOOT OUT. RETURN TO THE STANDING POSITION WITH BOTH FEET ON THE FLOOR. PROCEED TO PUT YOUR RIGHT FOOT OUT, AND SHAKE IT ALL ABOUT.

RojoLoco

@MattSpeller said in What Are You Doing Right Now:

Best suggestions so far for the message we replaced virused attachments with:

WARNING: THIS ATTACHMENT WAS DETECTED TO HAVE A VIRUS. FOR SYSTEM DECONTAMINATION STAND UP AND SHAKE YOUR MOUSE VIOLENTLY.

UPON OPENING THIS FILE YOU ARE REQUIRED TO DECONTAMINATE THE COMPUTER. PLEASE COMPLETE THE FOLLOWING STEPS CAREFULLY. YOU WILL NEED TO STAND UP FROM YOUR DESK AND PUT YOUR LEFT FOOT OUT. RETURN TO THE STANDING POSITION WITH BOTH FEET ON THE FLOOR. PROCEED TO PUT YOUR RIGHT FOOT OUT, AND SHAKE IT ALL ABOUT.

I'm copying this in case we ever get a real spam filter that can do things like replace attachments.