You could consider refusing, under the statement that you are employed to keep their IT systems working in a optimal state, and this procedure could easily have unknown knock on effects.
I can at least imagine an increased workload from people not knowing their usernames for at least 2 months.
Biting the hand that feeds IT
