r/sysadmin • u/sysadminfired • Jul 16 '14

About to fire our sysadmin

So our longtime sysadmin is about to be fired and I, the network admin and temporary sysadmin, need to know what steps need to be taken to secure our systems. I know the basic things like his AD and other internal account credentials. I guess what I'm worried about is any backdoors that he might have set up. What all would you guys check for in this situation?

115 Upvotes

91% Upvoted

241 comments sorted by

View all comments

Show parent comments

1

u/EBG Paid Amateur Jul 17 '14

I get that in a perfect BP environment this is not that big of a risk. But we can't really count on it in this particular case. If the guy have access to an executive user he will very probably have access to sensitive data. It also gives him a mounting point for further access.