Local school got caught with their pants down, I was invited by a friend to go into a computer lab and fix a computer, however the main IT guy there was being a jerkoff,, but left after I started in on him. They had these nice firewalls that I am very familiar with, and he never changed the Admin login, or only allowed certain IP's to connect to the management console. So all his porn surfing was forwarded to the supervisor every time the log was full, it took him almost a month to actually have another guy in to look at "these wierd e-mails I keep getting" Time, Date, Offending IP, User, and sites visited. He was asked to look a few times but didn't know how to stop them from coming to the superintendent and the super never deleted or would allow them to be deleted.
Plus his "security" was shit. As if no one has ever heard of RDC, to the domain server. Again, no Administrative lockdown. From what I was told later he blamed the outside source, the firewall manufacturer and was asked to leave when the super found out what it all meant.
Oops.