Slashdot Log In
Getting Rid of Staff With High Access?
Posted by
kdawson
on Fri May 23, 2008 09:17 AM
from the could-just-stop-showing-up dept.
from the could-just-stop-showing-up dept.
HikingStick writes "I've been in the tech field for over 15 years. After more than nine years with the same company, I've been asked to step in and establish an IT department for a regional manufacturing firm. I approached my company early, providing four weeks notice (including a week of pre-scheduled [and pre-approved] vacation time). I have a number of projects to complete, and had planned to document some of the obscure bits of knowledge I've gleaned over the past nine years for the benefit of my peers, so I figured that would give me plenty of time. That was on a Friday. The following Monday, word came down from above that all of my privileged access was to be removed — immediately. So, here I sit, stripped of power with weeks ahead of me. From discussions with my peers in other companies, I know that cutting off high-privilege users is common, but usually in conjunction with a severance offer (to keep their hands off the network during those final weeks, especially if there is any ill-will). Should I argue for restored access, highlight the fact that I am currently a human paperweight, request a severance package, or simply become the most prolific Slashdot poster over the next few weeks? Does your company have a policy/process for dealing with high-privilege users who give notice? What is it, and do you make exceptions?"
Related Stories
This discussion has been archived.
No new comments can be posted.
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
Full
Abbreviated
Hidden
Loading... please wait.
It's really the company's decision (Score:5, Insightful)
P.S. Some activities to pass the time would include Watching Grass Grow [watching-grass-grow.com] and/or Watching Paint Dry. [watching-paint-dry.com]
Re:It's really the company's decision (Score:5, Insightful)
What the organization really needs is some time to find out what sorts of things break when you aren't around to poke at them. For the next month they have the benefit of your knowledge, should they need it, but you won't be able to do stuff. This will allow existing staff members to learn to cover gaps while you are still around in case of an emergency.
You are leaving. The company is far less interested in what you can do for them in your last few weeks than they are in learning how to live without you. That basically requires that they cut you out of the loop as soon as possible.
Parent
Re:It's really the company's decision (Score:5, Interesting)
that pairing allows you to cover and discuss what you where doing and what needs to be picked up.
instead of spending your last weeks finishing your job you spend the last weeks as a source of information as someone else is trained to cover your job.
so far it has worked really well for us
Parent
Re:It's really the company's decision (Score:5, Funny)
Waste others' time the way they are wasting yours. Request frequent meetings with superiors to go over your daily reports. Hold very frequent meetings with random groups of underlings to discuss strange topics. For example, you could have an 8:15 meeting with the receptionist, an entry-level programmer, and a sock puppet regarding the situation in Myanmar, followed by a 9:00 meeting with the same entry-level programmer, a different sock puppet, and the janitor regarding your detailed synopsis of the new Indiana Jones movie.
Make loud phone calls about your internal organs. Bring cake every day and insist that it's someone's birthday. Mix cat food in with Chex Mix and leave a bowl of it in the break room - see how much is gone at the end of the day. Etc.
Just because you aren't allowed to do any work doesn't mean you have to be bored or watch grass grow to pass the time.
Parent
Re:It's really the company's decision (Score:5, Funny)
Parent
Re:It's really the company's decision (Score:5, Funny)
Parent
Re:It's really the company's decision (Score:5, Funny)
Parent
Re:It's really the company's decision (Score:5, Insightful)
Parent
Re:It's really the company's decision (Score:5, Informative)
Parent
Re:It's really the company's decision (Score:5, Insightful)
Parent
Re:It's really the company's decision (Score:5, Interesting)
Your example is exactly why giving notice is not something you really do anymore. I got further screwed. I was nice like you and did all that, then HR came back with a letter, "All vacation is canceled" you cant take vacation after you give notice, you also forfeit all vacation and sick time accrued.
So I sat there and watched TV the last 2 weeks in my office. I was going to document all I knew, I decided that I was not going to as they wanted to be jerks about me being a good guy.
I still get calls from people there about systems that I was the only expert on. I reply with, "what is your PO number for this consulting call? I would love to help you but management and HR told me point blank that everything has to be done by the book."
So they hired another firm to help them, that firm contracts me out as the consultant. It pisses off the upper managers.
Parent
Re:It's really the company's decision (Score:5, Interesting)
When I was laid off from a previous job-- they cut off my server access immediately. Though it wasn't necessary in my case, it certainly makes sense as a basic policy when letting someone go.
EXCEPT for the fact that they didn't bother to check for running processes first. Completely unaware of the fact that I was about to be laid off, I had kicked of an elaborate SQL script on the live server just before my boss called me into his office. They killed my account with this script still running-- oops. A friend of mine who was still at the company said that the resulting zombie crashed the main Oracle server, requiring a reboot, three days after I left.
So the "safe" choice of immediately removing access caused a major crash, while the "dangerous" choice of not removing access would have caused no problem whatsoever. (I'd say something about irony, but I don't want to kick off a debate on the word's meaning and whether it applies...)
Parent
Re:It's really the company's decision (Score:5, Interesting)
I had a similar story; I got canned, and the second I left the building they started reformatting my equipment to make sure I hadn't left any time bombs. Due to server problem, I'd been using my desktop for development, and I had a huge code package sitting there waiting to be deployed (They fired me because I'd completed it).
So they ended up wiping out the code. Woops. The icing on the cake was that they changed all my passwords, and revoked all my access, but they didn't check for running sessions, so I got home and I was still remotely rooted in a pair of live servers. I changed the MOTD on all the machines I was still logged into to: "When terminating an employee, make sure to abort active sessions before you change the passwords." Then logged off.
I'm sure that sent them into a frenzy of paranoia, but frankly, they were acting like idiots. They went out of business in 3 or 4 months, and the guy who fired me spent a year or so after that trying to get me to do contract work for him.
Parent
Re:It's really the company's decision (Score:5, Insightful)
Also, It's nice to leave without burning bridges. Who knows, maybe some of the people you leave behind may remember you in a positive light later in your career and provide an opportunity?
Parent
Back pain (Score:5, Funny)
Nice to know (Score:5, Funny)
Thanks for the heads up!
Re:Nice to know (Score:5, Interesting)
Parent
Re:Nice to know (Score:5, Insightful)
Parent
Keeping someone who will leave is sometimes good (Score:5, Interesting)
The one time I was laid off I was told it was effective in six weeks. I spent much of that time documenting and training coworkers on projects that I had worked solo on. My network access and other privileges were not affected. I asked the VP of engineering if I could take some of the source code home for reference so that I could answer questions over the phone or by email after I left. He drafted a letter stating that I was allowed to keep the source for this purpose only and that it remained company IP and could not be disclosed to anyone else. We both signed it.
This was about a 150 person company owned by a large international conglomerate. The VP was originally from the conglomerate's corporate headquarters and joined us two years earlier when we were acquired. The rest of management was local. I had been there about four years. A year after my layoff the situation at the company had improved and I was asked to return.
The moral of the story:
I don't deny that it is common to be immediately cutoff when you resign, but it is not a given.
Don't burn bridges.
It's a waste of money to pay someone who doesn't even want to be working for you. Obviously their output is going to be nill so their pay should be nill.
Myself and at least one other poster have demonstrated diligence training those who will be taking over. I think it is far more of an individual judgement call based on past projects and the individual level of trust.
If you are going to be involved in managing those family businesses I would suggest a less black and white perspective. Sorry, but management is not easy and such a black and white perspective often indicate the less capable managers or someone in an unforgiving bureaucratic/politicized environment who needs to cover their ass with policy compliance. That said, I agree that it many cases the proper decision is immediate cutoff, immediately issuing a final check, and wishing them well as you walk them out in a friendly manner. My point is merely that in some cases keeping them around for a little while can be beneficial to the company.
Parent
Re:Nice to know (Score:5, Interesting)
I was laid off from one large company once and they provided two months of paid time off. Once they notified me they cut off access. Their take was that my new job was to find another job. The kicker was that if you found another job during that time period then you did not get the payoff package at the end of the two months. Kind of funny, I found a new job just after the check cleared. They setup the rules, we just play by them.
I also had a situation a long time ago where a contractor that worked for me decided he was going to relocate for a new job. He gave two weeks notice. I checked his projects he had which were done and told him that he was no longer needed. I did not have any make work that justified me paying him for another two weeks. Such is the life of a contractor.
And don't forget the main rule here, no one is irreplaceable. No one! Not even you. (Yes, I even mean you there in the back with four digit
Parent
Are you crazy (Score:5, Funny)
Re:Are you crazy (Score:5, Insightful)
Parent
Re:Are you crazy (Score:5, Insightful)
Parent
Re:Are you crazy (Score:5, Informative)
Parent
Re:Are you crazy (Score:5, Interesting)
So, I spent 3 months or so picking my nose with little tiny things to do here or there. I was going nuts. I personally don't know how anyone can be at work for 8 hours a day, 5 days a week and just "browse the web". I set up a proxy server at home and use FoxyProxy so I could get to any site that was blocked (youtube, fark, but not
I brought in a USB HD with GB's of stuff on it, like... games. I still wanted to slam my face on a fork. Daily.
As a programmer I actually want and need to
So, during my many, many of hours of downtime, I just started looking for a new job on monster, etc. Then I would just leave without even needing to tell anyone, and go on interviews.
Found a new job. Now happy.
Though to be honest, with a state job, once you have about 1 year under you belt, it almost takes an amendment to the state constitution to get you fired. Which was nice from a security point-of-view. Though it also allowed a lot of under-skilled "programmers" to be permanent fixtures.
Parent
Re:Are you crazy (Score:5, Insightful)
I can't imagine something better than being paid to read Wikipedia and learn stuff all day long for months at a time. That's basically a MacArthur grant.
I'd learn Icelandic, finish my PIC data acquisition unit, re-learn synthetic organic chemistry, design and build a couple power supplies, actually learn electrical engineering rather than just pretending to know it, build a suit of chainmail, learn enough aerodynamics to design a new set of wings for a homebuilt plane... I could spend three years of 8 hour days online with ease, and love every second of it.
(I know this because after a car crash I spent about six weeks bedridden and that's exactly what I did the whole time, and it was *glorious*. I learned enough Japanese to have semi-intelligent conversations and taught myself Perl during that painful vacation.)
Parent
Re:Are you crazy (Score:5, Funny)
He's a Unix, you insensitive clod!
Parent
It's even surprising you must stay. (Score:5, Interesting)
In the early nineties, my dad was a high-privilege employee at a bank. Anyway, due to office politics, he pretty much got the boot because one of the higher ups didn't like him. (You know, how easy it is to fire someone if you really want). He had been working there for nearly 20 years, and according to local law he had 6 months notice. He was disallowed to go to the bank during those 6 months: from one day to another he sat at home.
I heard this is pretty much the rule with high-privilege employees. So, I'd suggest, sit back, enjoy yourself and troll on slashdot as if there were no tomorrow.
Re:It's even surprising you must stay. (Score:5, Interesting)
Parent
nope (Score:5, Funny)
Request "Gardening Leave" (Score:5, Insightful)
AKA. request to work from home if your access is revoked, since you can't do anything at that location now anyway.
Let me put it this way... (Score:5, Funny)
We look forward to hearing from you...frequently.
Access removal (Score:5, Insightful)
Any good admin/manager knows if you have physical access, you might as well have root/admininistrator access.
Enjoy the break (Score:5, Informative)
For example, I worked on banking software and had god-rights. If I as a regular employee steal all of the customer data and sell it, then I am the criminal. If I have been terminated and do the same, then they are at fault. Now yes, I realize that it's a pedantic difference, but the banks which run the software see a world of difference and will sue the my employer accordingly.
Believe me, it's cheaper to pay me 6 months severance than it is to be sued for my actions.
Most are set out the door immediately (Score:5, Informative)
Re:Most are set out the door immediately (Score:5, Insightful)
On the other hand, those two weeks could be a really crucial time for the employee to document his knowledge and train others. Any company that won't take advantage of those two weeks is probably just being paranoid.
Parent
Nothing new here (Score:5, Insightful)
Welcome to the work-world of the 21st century.
Steven
http://www.practical-tech.com/ [practical-tech.com]
http://blogs.computerworld.com/sjvn [computerworld.com]
Re:Nothing new here (Score:5, Funny)
He tries to interrupt me with some lame explanation, but I'm having none of it. I pick up his stupid little "certificate of excellence" award he got at the last quarterly meeting and throw it against the wall, shattering it to pieces. He tries to call security, but I rip the phone out of his hand and continue to hurl abuse that would make the paint peel if he didn't keep the office at 60 goddamn degrees all the time, rendering it permanently encased in ice.
Finally, some of my fellow co-workers come in and ask what's going on. I tell them I've been laid off, and so they start in on the boss too. How could you do this to our best employee, who do you think you are, etc. By this time, my boss is in a corner in the fetal position weeping softly. My two co-workers quit on the spot in solidarity, and throw their laptops at my boss, who is knocked unconcious by one of them, while the other smashes into his new 24" wide-screen HD monitor.
At last, my co-workers head off to the bar to continue the rant about the injustice of it all, while I go back to my desk to put my "wall o' tech books" in a box. While, I'm there, I happen to notice the back of my computer. Turns out I had knocked the Ethernet cable out with my foot.
Oops.
Parent
Re:Nothing new here (Score:5, Insightful)
No, welcome to the work-world of the U.S. (circa 1990-200?). Much of the world hasn't adopted these draconian and dehumanizing disemployment procedures. They rely on human decency during severance just as U.S. companies once did.
The common practice of frog walking terminated employees to the nearest exit results in far more long term damage than the hypothetical "disgruntled employee on his/her way out" ever could. I suspect some of the HR managers came up with this process in order to meld the Japanese "work to death" management theories with the U.S. "T minus 0 seconds of job security." It doesn't work but it gives the HR wonks something to justify their own jobs. Think of it this way, when Joe employee has zero job security, every minute of every day becomes a "I may be on my way out" minute. What makes that employee any less likely to do the damage 30 seconds before the termination decision is made? This is what we have across the U.S. right now and people wonder why you can't get a clerk at the *mart, why you can't get good service anywhere and why corporations are infested with incompetent, selfish, opportunists [slashdot.org] who steal from customers and sabotage companies and co-workers in order to gain "job security." The team player is dead, it's every man for himself in corporate America.
The odd thing is that these same American multinational companies often do have sane and humane exit policies for their outsourced contractors and their overseas employees.
Parent
Here's a plan: (Score:5, Insightful)
Rumor has it that step 4 has something to do with becoming a highly-paid consultant for the old company.
Take the high road (Score:5, Insightful)
Go on gardening leave. (Score:5, Insightful)
This is almost certainly not personal. Your senior management has obviously made a policy decision that the risks of leaving you with access to the systems are more important than the costs of locking you out. Obviously *you* know you are honest and safe, but they can't take that risk. If you think about the amount of damage you could have done if so inclined, you might see the point. There are quite a few horror stories about disaffected employees and computer systems.
Warcraft FTW (Score:5, Funny)
fuck it up for everyone else (Score:5, Funny)
You're not supposed to finish your projects (Score:5, Insightful)
You should spend the next 3 weeks documenting your projects. That is what the company needs from you. So few companies get this, want you coding until the last minute.
What happens when your stuff breaks? The next folks start at your documentation and go from there. Internal wiki's are great for this.
Sit back and relax... (Score:5, Interesting)
I spent those two weeks typing documentation on everything I did, and in training one of the junior admins to wrangle SMTP until they found a replacement. The only real benefit I got out of the deal was that I didn't have to carry a pager anymore.
The other benefit? The folks there were okay with me burning off paid sick days to arrange for the U-Haul and to tie up loose ends before the move.
Most companies that I've worked with in the past were similar - you only really lose access to the vital stuff, but there's usually plenty of non-vital stuff that still needs done until you bail.
Consult your replacement. (Score:5, Insightful)
It is unusual (Score:5, Interesting)
It does seem to me that there's little point in removing access and keeping an IT guy on. If they need to remove access they should just pay you for a month and let you go. The fact that they want you to stay and took away your access says a lot of negative things about them. They don't trust you, but they want to keep you to the bitter end anyway.
Knowledge transfer as much as you wish during this time. If I was being treated this way, it sure wouldn't make me want to seek people out to give knowledge to, but I would probably help anyone who came to me with questions. I do suggest to you that you not ask for your access back. If your company wants to be a jerk about this, let it be a complete inconvenience for them and play by those rules. A company that has already shown that they don't trust you is not going to look favorably on any requests you make for restored access. In fact, they might find it suspicious that you need the access and they might suspect you of planting trojans, etc. Just live with it. In fact, you probably should fight to not get the access back and here's why. If something goes wrong after you leave, your company has shown you that they don't trust you. They might blame you for whatever happens if you get your access restored.
Most companies do not act this way. I've worked in IT for almost 22 years now (since college) and we've either just sent people packing the same day (never for IT staff, but it has happened for sales people and such) or they got to keep their access until they left.
see if you can work from home... (Score:5, Interesting)
if they won't do that, ask for severence and be on your merry way enjoying the time off.
I wasn't so lucky. I was 'fired' (new management didnt' understand my role as lead network security analyst, and even worse, feared my knowledge). But because of that fear, I got a severence package and most of the bonus I was promised for helping an outsourcing initiative (no, it wasn't me who was replaced through that). I was also able to collect unemployment. The downside is that I had to explain why I was fired in all of my interviews.
Re:They are protecting their assets (Score:5, Insightful)
Anyone who is malicious and has half a working brain would, of course, do all of that evil stuff before giving any notice. Do they really think that all of their employees are malicious, incompetent, backstabbing morons ?
You could be trying to steal information or recruit your coworkers to your new job.
Yes, the free market is a cool thing, as long as it doesn't impact the bottom line. Then you should fight it tooth and claw. And you should hang on to moronic employees who can't look for better jobs themselves, but need to be recruited by a coworker. Geez. Some people in charge must really, really think that all of their employees are a bunch of dimwitted morons. Maybe they're right, too.
Parent