
Re: Users need to know that
.. but maybe you would have someone who had set Office documents to NOT execute macros.
Ever.
Not that I'm a fan of MS Office (we ditched it completely), but IMHO people should be asked during installation if they absolutely needed macro functionality. For 99.9% of users, this is overkill and can be disabled. If someone wants it enabled they should be required to sit through a security briefing, to be repeated at least annually to retain the privilege of having the ability to invite malware.
(and no, anti virus isn't an asnwer as it lags behind especially zero day exploits).