Timeline for When a sysadmin leaves what extra precautions need to be taken?
Current License: CC BY-SA 2.5
2 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Nov 14, 2010 at 11:26 | comment | added | AviD♦ | Very good recommendations here, I would add to review ALL user accounts (especially admins, but not only), see if he set up any orphan accounts; Shut off remote access on sensitive machines, or better yet ALL machines; review the audit logs of any sensitive/administrative operations he did, especially in the previous few months (and the first few setting up the systems). You DO have admin audit logs, RIGHT? | |
| Nov 12, 2010 at 13:42 | history | answered | Mark Davidson | CC BY-SA 2.5 |