@Mike-Davis Interesting. The note file creation was what tipped it off for me at my last company.

@Dashrender said:

@Jason said:

It can be set to strip the macro's out or Print the whole file to a PDF. The PDF would not have macro's. Our solution even will scan for urls in documents and see what they are.

what are you using?

Mimecast

https://community.mimecast.com/docs/DOC-1454

@scottalanmiller said:

I've not met these IT guys. I don't think that that is a realistic statement at all. I'd say saying 2% would be fine would be a stretch. Most IT people I see run as admin and are pretty reckless with security.

Yeah, because of places like this, when i did my last PC upgrade (to windows 😎 I moved to a two user account setup. 1 non admin for normal working - like this posting, 2 admin for admin stuff.

A bit of a pain, but MS really does have it down pretty well now prompting me when it needs elevated permissions.