I remember awhile back reading this article about how a pen testing company came up with a a really neat way to social engineer the employees of a company. How? Place USB thumb drives at strategic locations (like the main entrance) and see if employees plug them in and open up applications or pictures contained on the drives. Great way to test your security policies! You can also conduct this type of test with CD-ROM’s and even floppy disks.