Where I work there is a practice of adding a
t_ prefix to all temporary employees logins (sAMAccountName).
When someone switches from temp to perm or the the other way the prefix is add/removed.
While is ok with Windows and AD, this practice is messing most (if not all) other systems that are relying on AD/LDAP for authentication, as they are not able to detect a renamed account.
Is there any strong reason for having such a practice, aren't other alternatives that would play better with other systems?