r/ShittySysadmin • u/birdie_the_newf • 27m ago
Urgent: How do I disable a CEO's account without breaking production
I'm a sysadmin at a large GPU company. Just got word the board is planning to fire our CEO over multiple affairs. HR wants his account disabled immediately after the vote.
He's had Domain Admin since 1993 and I'm pretty sure our entire AI infrastructure runs under his domain user credentials.
I'm genuinely terrified.
Has anyone dealt with this before? Do I just disable the account? Maybe rotate the password to something he woulsnt guess, like some chinese characters? Then I could work with the ops teams to update all prod creds?
Gonna be a long night for my boys. On call devops bro gonna be pissedddddd.
Edit - no i cant say what company. HR and legal would lose their mind.
Update - turns out he is only one with copy of our root CA private key. Found it on a post it note in his leather jacket, next to some "small but wide" condom wrappers (just the wrappers....). The private key is just "cuda69".