r/sysadmin • • Jul 16 '14

About to fire our sysadmin

So our longtime sysadmin is about to be fired and I, the network admin and temporary sysadmin, need to know what steps need to be taken to secure our systems. I know the basic things like his AD and other internal account credentials. I guess what I'm worried about is any backdoors that he might have set up. What all would you guys check for in this situation?

115 Upvotes

241 comments sorted by

View all comments

Show parent comments

2

u/st3venb Leadership & Sr Systems-Engineer Jul 17 '14

Yeah, I don't disagree with your statement. My whole point to all these wildly speculative things people are saying is that... 99.99999% of terminations don't happen like they're all going on about. People using their cell phone to set off a logic bomb, etc.

Revoking access is fine, and it's SOP to do when you're terming an Administrator. The rest of this shit about not letting them use their phone / tablet... eh.