Office365 Staff Leave

[itgeek]

Hi,

 

please can I ask what is the recommended way to deal with staff that have left the organization. I currently block the users mailbox however they can still receive emails. I have put an automatic reply, but what do others do?

 

Thanks

[DavR]

I just remove the user, here. If people try and contact them, they'll get an unknown mailbox error.

 

Depends where your retention policies sit when it comes to ex-staff, really.

[DalekSec]

Takeaway the license, Disable, renamed to have ' - Leaver ' on the end

 

Delete after 3 months. We have retention policies and backups in case something someone needs after that time.

[psydii]

Leavers have their passwords reset, and accounts disabled in AD, they are then stripped of group memberships, and then added to a group that gives them an A1 licence and a "block mail delivery" group. This latter group is then used in a transport rule to provide a custom bounce message advising the sender that the recipient has left and they should update their contact information (with a reference to the main office email and website to assist them in identifying the appropriate individual)

 

At some point later accounts are stripped of the A1 licence.

 

We have defender /azure atp keep an eye on these disabled accounts for unexpected activity.

[TechMonkey]

Depends on the user. Basic teacher, they are told to set an OoO, sort their areas out, account is disabled, they are stripped of groups and shifted in to an Archive OU which isn't synced with AAD. Department heads and above, or by special request, we liaise with their line manager and then go through the delete process in AAD and assign their mailbox and OneDrive to a named user for a set period of time, again based on the users level.

 

I like @psydii process, I might have to try and integrate that with ours.