Yeah, yeah, yeah. We've all gotten the calls that we need to disable an account between 10:01 and 10:06.
Today was something completely different. I was cleaning up disabled AD accounts and testing our AD object backup solution before blowing away 300+ disabled accounts. I see that an engineer on another team has had their regular and admin accounts disabled in the backup report.
I check AD & it's still active there, but I assume this is a propagation thing or was a mistake that was reverted. I message my manager and ask if there is something up with the user and he asks how I figured it out. I explain I was testing AD backups before removing accounts in bulk. He asks me not to say anything, which is fine. This isn't my first rodeo.
What bothers me is that his accounts are now disabled in AD, he's offline on teams. The thing that's creepy is that it's been nearly 2 hours and no official announcement. This is the part that kinda bothers me.
Anyone else have a similar experience like this?
EDIT: I knew what this was when I saw it because it's payday Friday and the end of the current pay period.