When a network administrator puts in his 2-week notice…

… what do you do?

Immediately remove him from service, disable all his access and pay him til his last day?

Trust he won’t do anything bad and keep things status quo til his last day?

Quietly monitor everything he does and pull some of his privileges out?

Assume he’s already filled his iPod up with everything already he can use against us later on down the road?