Securing the domain admin account with restricted admins
The time I removed access to the domain controller for my boss.
The time I killed the public fileshare