[pharmakom]

I once discovered that a very large org had AD configured in such a way that you could see “last seen at” timestamp for everyone profile in the company.

It would have been trivial to track everyone’s hours using this, which would likely have been unpopular.