Call the receptionist from an outside line. Tell them that you're a new salesperson and that you didn't write down the username and password the sales manager gave you last week. Tell them that you need to get a file from the e-mail system for a presentation tomorrow. Do they direct you to the appropriate person?

Call the human resources department from an outside line. Don't give your real name, but instead say that you're a vendor who has been working with this company for years. You'd like a copy of the employee phone list to be e-mailed to you, if possible. Do they agree to send you the list, which would contain information that could be used to try to guess usernames and passwords?

Pick a user at random. Call them and identify yourself as someone who does work with the company. Tell them that you're supposed to have some new software ready for them by next week and that you need to know their password in order to finish configuring it. Do they do the right thing?