I'm trying to educate my staff on these threats. I have everyone including myself loggin in as a standard user (non-administrator). How much does that help to protect us?

For attachment macro attacks should we be specifically disabling them somewhere in Office? And can any non-administrator "enable" macros?

Of course I've instructed staff to not open attachments in general unless really sure of the source.

We apply all our microsoft, adobe reader, java patches promptly.

Backups including disconnected drive.

Anything else for prevention recommended?

Larry
Solo IM
Midwest