Admin Panel -> Settings -> Attachments
check allow attachments (if not already checked)
I do not believe that you can post attachments as internal only, but if you make sure you un-check "Email attachments to the user " it won't send them the attachment to them at least.
You would probably have to modify the source to get the behavior that you're talking about.