The guy gets back and the prof tells him to come into his office immediately and then shows him the e-mail. The e-mail was really blistering, chewing him up and down, swearing, etc. The prof then went to the guys workstation and wrote an e-mail to himself (so it would look like it came from the guy to the professor). One day the guy got up and left and it was unlocked. He had a guy under him who refused to lock his workstation when he got up, even though it was policy and had been repeatedly warned. Story from a professor: He was in the military before become a prof. It breaks authenticity and non-repudiation (I think, sometimes a little fuzzy on that one). This is a security measure? I'm pretty sure that's closer to an insecure measure.
