You also have to check the "external forwarding" of all extensions, if this has been set to the LD or no prefix then that's another way to get around barring. also there would a possability to use "system speed dials". Some of these methods seem long and involved and you'd think in days of VOIP that PABX hacking has lost some of its appeal.