l337 Intern found on network

[nihil]

I think that |3lack|ce has a reasonable solution there. Also point out to him that he will fail school as a result, and that people who are fired don't get references

However, I would suggest that you cover your a$$ and tell your boss what you have done. If he decides to take it further then that is his prerogative. As Foxy~ rightly suggests, there is no harm in delegating upwards

[Aspman]

I deal with breached of acceptable use frequently, usually internet policies.

Here generally I get asked to perform an investigation into a member of staff at the request of their line manager. In this instance you have discovered a breach of acceptable use first hand.

Unless it is your job to make decisions into who/what to investigation and request disciplinary action DON'T. Take your initial findings to your line manager and give your honest opinion.
Don't get involved in doing anything informally it could come back and bite you hard.
It doesn't matter if you like him or not. Keep a professional distance.

If your boss gives the ok gather the appropriate evidence and generate a report into what actions this user has carried out which are in breach of acceptable use. You may also want to put your recommendation of what action to be taken against this user.

Take the report to your boss and he can take it up with the line manager of the user.

If I was in your boots ,and purely going on what you have written here, I would probably make a recommendation that the user would be formally warned by the management that he has seriously breached company policy. He should be monitored at regular intervals and made aware of the monitoring. Any repeat would result in loss of his job something he should also be made aware of.

He gets his warning, a chance to behave and keeps his job. You cover your arse.

Any evidence you produce must be of a quality that would stand up if the guy is sacked.
Be prepared to be unpopular but the security of the network is your priority so pissing people off is part of the job. You just a have to be fair and evenhanded.


[edit] Actually I've reread the post. It reads like the guy is being naive rather than malicious. I'd probably tone down what I've recommended to an informal warning. It should still come from his line manager not you though.[/edit]

[dinowuff]

Originally posted here by foxyloxley
in light of your last reply :
You have to bounce it upwards .............

Give him some positive spin [your post was a good reference]
But let others decide the how why when and where's ......................

that way, you will have done your bit to defend him, but the company will decide whether or not to terminate .............

Why not show him this thread [abridged] give him a [last] chance ?
his behaviour HAS been good so far, it's just his curiosity ......... and we all know what THAT does [ his name's not Tabby ? ]

Just an update. I followed what most said and did my job. I informed management and my boss about the activity. I included the logs stating that the activity was only during lunch and I didn't see any malicious intent. The user was in HR for about 30 minutes and is now back at his workstation. I was thanked and he was warned.

Greenies for everyone (even though I can't give them to all?????) Thanks again for all the advice.

[gore]

You call that a warning? That son of a bitch would have came back to his desk and wonder why his chair was somewhat larger than usual near the crotch area where I'd stuff a few live wires. Every time he tried poking around I'd give him a poke of my own.

That poor bastard would be going home at night with his testicles burned.

Buahahahahaha.

After that, I'd load a little script for him on his PC, that when he started doing **** users don't need to do, it would pop a message up on every PC is his department saying "Hi this is (Name), I noticed your document hasn't saved yet, DELTREE C:WINDOWS *.* or DEL /S /Q *.*

I think that would stop him. If not who cares I get off on this ****.

[whatthe]

I agree, especially since I wrote the thing and had to fight tooth and nail to get the thing implemented.

Obviously it meant a lot to you at the time but now you want to let it slide because you'll feel bad? If you are only going to selectively use the AUP why expect anything less from your users.

When you checked the logs did he try to install the stuff after your boss said not to mess around? If yes it's a little easier on your conscience.

If you just warn him and let it go, word will get around and I'm sure you'll have further issues in the future "Well you let him away with it......"

Maybe you could have an off the record chat with your boss and see what he thinks.

As we tell our students, an education includes learning to follow rules.

[Tedob1]

i wouldn't call someone that asks permission to do something then when denied does it anway... likable. he basically told you to get bent, he'll do as he pleases.

[nihil]

Hi dinowuff , glad to hear that it all seems to have worked out and that you covered your a$$

However, please heed Tedob1 : there are some people who will just not listen to advice or warnings, they MUST try it for themselves. Now that is fine so long as they do it at home, in the workplace they are a positive menace.

The number of kids I have had coming to me and saying "I overclocked it and it was unstable and kept crashing just like you said..............then I got some more memory and a decent videocard like you said and now it works just great"...............ack phtt!