Do not close the account without a data plan

Business email, documents, contacts and conversations may be needed after the employee leaves. Before disabling or deleting an account, decide who becomes responsible for that information and how long it must remain available.

  • Transfer ownership of cloud documents and shared folders.
  • Decide whether incoming email should be forwarded or monitored.
  • Preserve business contacts, calendars and relevant correspondence.
  • Remove private or unnecessary material according to company policy.
  • Record who approved the transfer and retention period.

Deleting first and asking questions later can turn a routine departure into a data recovery problem.

Business Microsoft 365 accounts and documents that must be protected during employee offboarding
Before an account is closed, decide who will take responsibility for business email, documents and required access.

Which access should be revoked

The checklist should cover more than the main email account. Employees often have direct access to several cloud applications, VPN, remote desktop, password managers, social media, supplier portals and shared devices.

  • Microsoft 365, Google Workspace and other email services.
  • VPN, remote desktop and remote support tools.
  • CRM, accounting, logistics and industry-specific applications.
  • Shared passwords and password manager collections.
  • Website, hosting, domain and social media access.
  • Door codes, Wi-Fi credentials and physical access where applicable.

A safe order of actions on the departure day

  1. Confirm the exact departure time with the responsible manager.
  2. Save or transfer required business data.
  3. Revoke active sessions and change the account password.
  4. Disable sign-in and remote access.
  5. Remove the user from groups, shared mailboxes and applications.
  6. Recover equipment and document its condition.
  7. Reassign or remove paid licences.
Timing matters: access should not remain active after departure, but disabling it too early can interrupt an approved handover.

Return and inspect business equipment

Record every returned item: laptop, desktop, phone, monitor, charger, token, access card and storage device. The inventory should include the device identifier and visible condition.

Do not immediately give the computer to another employee. Back up approved business data, remove the previous profile, review device security, update the system and prepare a clean account for the next user.

Why offboarding matters more as a business grows

In a very small team, people often remember who had access to what. That memory becomes unreliable as employees, contractors and cloud services increase. A written process prevents forgotten accounts and unnecessary licence costs.

Regular managed IT maintenance should include an account inventory so the business can compare active users with current employees and approved external partners.

Conclusion

Employee offboarding protects business continuity and reduces unnecessary access. Plan the transfer of data, revoke accounts in the correct order, recover equipment and retain a simple record of every action. The process should mirror onboarding and use the same inventory.