Blocking a departing employee's sign-in is an essential first action, but it is not a complete leaving process. Work data may still be present on a device, important files may still belong to the leaver and third-party applications may have been connected to the account.
A practical offboarding sequence
- Secure the account
Block sign-in, end active sessions and protect access to the account. - Check devices
Recover company equipment and apply the agreed process to work data on personal devices. - Review applications
Identify connected apps, shared credentials and access managed outside Microsoft 365. - Transfer ownership
Move important files, mail, groups and responsibilities to the right person. - Retain and remove
Follow the business's retention requirements, then remove licences and access that are no longer needed.
Make it repeatable
The strongest process starts before the leaving date. HR or the manager confirms the date, devices and responsibilities; IT performs and records the technical actions; and an accountable person checks completion. Use the same checklist every time and adjust it when a gap is found.
See how Tide IT approaches reviewing and improving repeatable IT processes.