Make sure the CICS does not have DISA programmed

When removing "Outbound Transfer" also remove "Off Premise Notify" for all COS's that do or will not require it in future (including unused COS's)

Make sure General Delivery and System Manager do not have access either way.

Change Password Expiry to 0 so they do not have to keep changing passwords and muck things up.

Enable Trivial Password Checking in System Properties so they will not be allow passwords like 1234
Tell them to use 6,7 or 8 digit passwords.

Look at Reports/MailboxInformation and it will show any mailbox that has been dialing out and show the number....do ASAP as the reports last only a week.

Ask if they have ever seen the calls go out (shows lines in use)

If you do not see any evidence via visual or reports then know that it is possible the marketers are just spoofing their Caller ID.




=---()))))))))---=
www.curlycord.com
[Linked Image from telcopc.ca]
Toronto, Canada