Yeah, I’m very confused by this. Why do the users notifying IT have to do the training?
I’ve worked a help desk before, while after dozens of people sending it in we don’t really need it forwarded anymore, people don’t know that until we get the I’d still rather people forward it than click it. Ignore and delete is best since I guarantee someone will forward it to IT, but forwarding (even forwarding and asking) is never bad and demonstrates good awareness.
Yeah, I’m very confused by this. Why do the users notifying IT have to do the training?
The URL likely is unique per user. They forward it, IT clicks the link, it registers that that user clicked the link even though IT did it.
IT can look up the original (including all headers) based on the forwarded content. It’s on the same mail server.