We disallow the use of RAS in our domain. If a RAS event appears in a log it's cause for concern. One of the first escalated measures we perform is to check if there is a modem installed on the server ...