Email Security Test

Hello, I am the network administrator for our local school district. I want to run a security test with respect to email. Too often we still have staff who open attachments despite having a clear policy on unexpected attachments What I want to do is send out an email with an attachment that, when run, will simply e ...

Windows Security 292 This topic was started by ,


data/avatar/default/avatar12.webp

75 Posts
Location -
Joined 2003-05-05
Hello,
I am the network administrator for our local school district. I want to run a security test with respect to email. Too often we still have staff who open attachments despite having a clear policy on "unexpected attachments"
What I want to do is send out an email with an attachment that, when run, will simply email me the email address/name of the person who ran it. I don't need it to report anything else - just the name.
 
This will allow me to setup training sessions on email security with the staff who obviously need it.
 
Does anyone know of a simple program that will do this?
 
thanks for your help all.

Participate on our website and join the conversation

You have already an account on our website? Use the link below to login.
Login
Create a new user account. Registration is free and takes only a few seconds.
Register
This topic is archived. New comments cannot be posted and votes cannot be cast.

Responses to this topic


data/avatar/default/avatar33.webp

686 Posts
Location -
Joined 1999-10-28
If you run a full Win2k, XP or NT4 network, write an Access db with the following function in it to get the username and then have an "on load" sub that calls the application "net send jimbo GetUserName()". You could just write a form that autoexecs and also calls this function. Perhaps you could have the form say "You have been reported to your system administrator for violation of the email policy"
 
You'll likely get a bucket of popups on your screen, but you'll know who it was.
 
Function GetUserName() As String
 
Dim LUserName As String
Const lpnLength As Integer = 255
Dim status As Integer
Dim lpName
 
' Assign the buffer size constant to lpUserName.
LUserName = Space$(lpnLength + 1)
 
' Get the log-on name of the person using product.
status = WNetGetUser(lpName, LUserName, lpnLength)
 
' See whether error occurred.
If status = NoError Then
' This line removes the null character.
LUserName = Left$(LUserName, InStr(LUserName, Chr(0)) - 1)
 
Else
' An error occurred.
MsgBox "Unable to get the name."
End
End If
 
GetUserName = LUserName
 
End Function

data/avatar/default/avatar12.webp

75 Posts
Location -
Joined 2003-05-05
OP
That will do excellently! Thanks!
 
In one school the teachers all login as "teacher" so it won't specifically tell me which one ran it. But, I will be able to message all of them telling them that someone violated the email policy. The person will know they are busted without having the embarrassment of looking stupid (or getting caught). I believe they will still learn the appropriate lesson.
 
Thanks for your help.