--- title: Employee Leaving? A Microsoft 365 Access and Data Handoff Checklist description: Use a Microsoft 365 employee departure checklist to remove access, hand off email and files, recover devices, and review licenses before deleting accounts. image: https://www.secondstartechnologies.com/hubfs/exec-76cf5a6f-2081-4eb7-8914-959246e3ec75-1.png --- [Skip to content](https://www.secondstartechnologies.com/blog/employee-leaving-a-microsoft-365-access-and-data-handoff-checklist#main-content) [![Second Star Technologies IT Support Bakersfield CA Logo](https://www.secondstartechnologies.com/hs-fs/hubfs/Untitled%20Design(13).png?width=121&height=121&name=Untitled%20Design(13).png)](https://www.secondstartechnologies.com/) [Home](https://www.secondstartechnologies.com/)Services [Managed IT Services](https://www.secondstartechnologies.com/managed-it-services-bakersfield-ca)[Cybersecurity](https://www.secondstartechnologies.com/cybersecurity-services-bakersfield-ca)[Data Protection](https://www.secondstartechnologies.com/data-backup-bakersfield-ca)[HubSpot Services](https://www.secondstartechnologies.com/hubspot-services-bakersfield-ca) [About Us](https://www.secondstartechnologies.com/resources/about-us)[Contact Us](https://www.secondstartechnologies.com/contact)[Blog](https://www.secondstartechnologies.com/blog)[(661) 769-6145](tel:+16617696145) Menu [Home](https://www.secondstartechnologies.com/)Services [Managed IT Services](https://www.secondstartechnologies.com/managed-it-services-bakersfield-ca)[Cybersecurity](https://www.secondstartechnologies.com/cybersecurity-services-bakersfield-ca)[Data Protection](https://www.secondstartechnologies.com/data-backup-bakersfield-ca)[HubSpot Services](https://www.secondstartechnologies.com/hubspot-services-bakersfield-ca) [About Us](https://www.secondstartechnologies.com/resources/about-us)[Contact Us](https://www.secondstartechnologies.com/contact)[Blog](https://www.secondstartechnologies.com/blog)[(661) 769-6145](tel:+16617696145) [\<\< Back to Blog](https://www.secondstartechnologies.com/blog) [Business IT](https://www.secondstartechnologies.com/blog/topic/business-it) # Employee Leaving? A Microsoft 365 Access and Data Handoff Checklist ![Image of Brandon Phipps](https://www.secondstartechnologies.com/hs-fs/hubfs/SH1782.png?height=60&name=SH1782.png) Brandon Phipps Share [mailto:?subject=Check%20out%20https://www.secondstartechnologies.com/blog/employee-leaving-a-microsoft-365-access-and-data-handoff-checklist%20&body=Check%20out%20https://www.secondstartechnologies.com/blog/employee-leaving-a-microsoft-365-access-and-data-handoff-checklist&media=https://1906804.fs1.hubspotusercontent-na2.net/hubfs/1906804/exec-76cf5a6f-2081-4eb7-8914-959246e3ec75-1.png](mailto:?subject=Check%20out%20https://www.secondstartechnologies.com/blog/employee-leaving-a-microsoft-365-access-and-data-handoff-checklist%20&body=Check%20out%20https://www.secondstartechnologies.com/blog/employee-leaving-a-microsoft-365-access-and-data-handoff-checklist&media=https://1906804.fs1.hubspotusercontent-na2.net/hubfs/1906804/exec-76cf5a6f-2081-4eb7-8914-959246e3ec75-1.png) ![Returned access badge, laptop, email envelope and file checklist for a Microsoft 365 employee departure handoff.](https://www.secondstartechnologies.com/hs-fs/hubfs/exec-76cf5a6f-2081-4eb7-8914-959246e3ec75-1.png?width=1600&height=900&name=exec-76cf5a6f-2081-4eb7-8914-959246e3ec75-1.png) Employee Leaving? A Microsoft 365 Access and Data Handoff Checklist 3:44 An employee's departure can leave customer messages in one mailbox and important job files in a personal OneDrive folder. Your business still needs those records after the person stops working. IT also needs a clear instruction about when access should end and who can authorize the change. A written handoff keeps those decisions connected, so an account isn't deleted before the business has checked what it needs. ## What should a Microsoft 365 employee departure checklist include? Start with approved timing and preservation requirements. Assign the access changes, mailbox and file handoffs, equipment return, and final license review to named people. Have each person record completion and unresolved items. This is a planning worksheet for the business owner and IT provider; the administrator should use Microsoft's current instructions for the actual configuration. ## Who authorizes the departure and the data handoff? The owner or authorized personnel contact should give IT written instructions identifying the employee and effective date, time, and time zone. Name the approver, the manager taking over the work, and any records that require special handling. Keep personnel explanations out of a general support ticket unless they are needed for the authorized work. Settle retention or legal-hold questions with the responsible business or legal contact before deleting data. Microsoft documents preservation options for departing users, but eligibility and setup depend on your subscription and configuration. An ordinary file copy or mailbox handoff should not be treated as proof that a preservation requirement has been met. ## Which access needs to end? Ask IT to review Microsoft 365 sign-in, active sessions, registered authentication methods, administrative roles, and related services. Blocking sign-in, resetting credentials, and revoking sessions serve different purposes. They do not establish that every open application has stopped working immediately. Microsoft's access-revocation guidance explains that applications can manage their own sessions. - **Microsoft 365:** Confirm the correct account, authorized access changes, and any hybrid directory requirements. - **Other applications:** Assign removal of separate logins, remote-access accounts, phone services, and vendor portals to their owners. - **Shared credentials:** Identify business passwords the employee knew and plan authorized changes without interrupting other users. - **Authentication and recovery:** Review registered methods, recovery contacts, and any business administration tied to the employee's phone or email. Use a service list instead of relying on memory. Record any application that cannot yet be closed, why it remains open, and who will resolve it. Our [business cybersecurity services](https://www.secondstartechnologies.com/cybersecurity-services-bakersfield-ca) page describes the account-protection work to discuss in your support scope. ## What happens to the employee's mailbox? Decide whether an authorized replacement needs historical mail, future messages, or both. Forwarding routes new mail; it does not provide the old mailbox history. A shared-mailbox conversion can support access to existing messages and calendar information. Confirm licensing, retention, and account requirements before making that change, and retain the account that anchors a shared mailbox. Give the approved recipient access through their own account. Set a review date for forwarding and delegated access, and decide who handles open customer conversations and recurring meetings. Do not circulate the former employee's password as the handoff method. ## How should OneDrive and shared files be handed over? Name a business reviewer for OneDrive content and a suitable destination for documents that need ongoing ownership. Check the tenant's retention settings before account deletion rather than relying on a remembered recovery deadline. Microsoft's guidance describes granting access and moving needed files; the business still needs to decide which records belong where. Have the reviewer open important documents using their own account. Check permissions, linked files, and the work those documents support. Identify content already held in team locations so it is not unnecessarily copied into another person's private folder. Record what was moved, what stayed, and any missing access. Discuss recovery coverage separately from the handoff. Our [backup and data protection services](https://www.secondstartechnologies.com/data-backup-bakersfield-ca) page can help frame that conversation. ## What should happen to laptops and phones? Record each device, whether the business or employee owns it, and who will collect it. Identify local records that must be preserved before reuse or erasure. In Intune, available remote actions vary by platform and configuration, and devices generally need enrollment and connectivity to receive commands. Retirement and a full wipe have different effects; the administrator should confirm the appropriate action and its result. A queued command is an unresolved task until its outcome is verified. Keep a returned-device receipt or management result with the departure record, and assign follow-up for equipment that remains offline or unreturned. ## Use a handoff worksheet with named owners | Work item | Owner to name | Evidence to record | | --- | --- | --- | | Timing and preservation | Authorized business contact | Approved time and written preservation decision | | Accounts and sessions | IT administrator and app owners | Actions, completion times, exceptions | | Email continuity | Manager and mailbox administrator | Approved recipient, tested access, review date | | Business files | Data owner and IT | Reviewed destination and successful access check | | Devices | Equipment custodian and IT | Return receipt or confirmed remote-action result | | Licenses and account disposition | IT with business approval | Dependencies checked and next review assigned | Add the employee identifier, approver, ticket number, completion date, and unresolved-item owner to your own worksheet. Keep passwords and sensitive personnel details in the approved secure system. ## When can licenses and accounts be removed? Make this a closing decision after the preservation and handoff checks. Confirm that mailbox arrangements, OneDrive files, application ownership, and any hold or retention requirement have been addressed. Have the administrator document which licenses can be removed and why an account must remain. Avoid making deletion a routine first step simply to free a license. ## Employee departure FAQs ### Is changing the password enough? No. Ask IT to address sign-in, sessions, other application accounts, and relevant device access, then document remaining exceptions. The application and device setup affect when access actually ends. ### Should the replacement employee use the old login? Use their own authorized account and grant the access needed for the handoff. That makes responsibilities clearer and avoids distributing the departing employee's credentials. ### Does forwarding email preserve the whole mailbox? Forwarding handles new messages. Historical mail and preservation need their own approved arrangement. ### What shows that offboarding is finished? A signed-off record should show the access changes, accepted data handoff, device status, license decision, and any exception with an owner and review date. A manager should confirm that the transferred work can continue. ## Plan the handoff with Second Star Technologies For a Bakersfield or Kern County business, bring the approved timing, application list, device inventory, and names of the people taking over the work to a [support discussion with Second Star Technologies](https://www.secondstartechnologies.com/contact). Review our [managed IT services](https://www.secondstartechnologies.com/managed-it-services-bakersfield-ca) and confirm which departure tasks are covered by your agreement. Read the audio summary transcript An employee's last day is approaching, and the business still needs their email, project files, and customer conversations. Turning off a login is only part of the job. Someone also needs to take responsibility for the work that remains. Welcome to The IT Edge: Business Tech Made Simple, from Second Star Technologies. Today we're walking through an employee departure checklist for a small business using Microsoft 365. Start with written instructions from the owner or the person responsible for personnel decisions. IT needs the correct employee, an effective date and time, and the name of the person authorized to approve changes. Identify who should receive business records and who should handle incoming messages. If records need to be preserved for a dispute or a legal requirement, have the responsible person settle that before accounts or devices are deleted. Next, make the access list broader than email. Include business applications, remote access, phones, password vaults, shared accounts, and any administrative roles. Ask who owns each service and how that owner will confirm the change. A Microsoft account may be one sign-in among several. At the approved time, the administrator should follow the current Microsoft procedure for blocking sign-in, changing credentials where needed, and revoking sessions. Those actions are related, but they do different things. An application can have its own session, and a computer can hold downloaded files. Ask for confirmation of what was changed and any access that still needs attention. Don't assume a password reset has instantly closed every application. Then decide what happens to email. Forwarding new messages doesn't give the replacement employee the old mailbox history. A shared mailbox can provide authorized access to existing business mail, but the administrator needs to check the account and license requirements before changing anything. Give access through the replacement employee's own account. Don't hand out the former employee's password. Treat files as a separate handoff. Name the person responsible for reviewing the former employee's OneDrive and finding the business documents that need a lasting home. Check shared folders and project dependencies too. Have the new owner open the important files from their own account and confirm that they can continue the work. A copied folder isn't a completed handoff until someone has checked the result. Devices need their own decision. Record the laptop or phone, its ownership, whether it was returned, and whether records must be preserved. Remote retirement and a full wipe have different effects. Available actions depend on enrollment, platform, and connectivity. A command waiting for an offline device is still pending. Have IT confirm the result before marking that device finished. Leave license removal and account deletion until the earlier checks are settled. Record any mailbox, file, backup, or retention dependency that requires the account to remain. Assign a future review date when something must stay in place. The closing record can be simple: the approved action, the person responsible, the completion time, the evidence, and anything unresolved. That gives the owner a clear view of what has been secured and what still needs work. For help planning the business IT portion of an employee departure in Bakersfield or Kern County, contact Second Star Technologies. Bring the approved timing, the application list, and the names of the people taking over the work. We can discuss the access and data handoff responsibilities to include in your support scope. ## References Microsoft. (2026). *Overview: Remove a former employee and secure data.* Microsoft Learn. [Read the employee departure overview](https://learn.microsoft.com/en-us/microsoft-365/admin/add-users/remove-former-employee?view=o365-worldwide). Microsoft. (2026). *Step 1: Prevent user sign-in and block access to Microsoft 365.* Microsoft Learn. [Read the sign-in and session guidance](https://learn.microsoft.com/en-us/microsoft-365/admin/add-users/remove-former-employee-step-1?view=o365-worldwide). Microsoft. (2026). *Revoke user access in Microsoft Entra ID.* Microsoft Learn. [Read the access-revocation guidance](https://learn.microsoft.com/en-us/entra/identity/users/users-revoke-access). Microsoft. (2026). *Step 2: Save the contents of a former employee's mailbox.* Microsoft Learn. [Read the mailbox preservation guidance](https://learn.microsoft.com/en-us/microsoft-365/admin/add-users/remove-former-employee-step-2?view=o365-worldwide). Microsoft. (2026). *Step 4: Forward a former employee's email to another employee or convert to a shared mailbox.* Microsoft Learn. [Read the email handoff guidance](https://learn.microsoft.com/en-us/microsoft-365/admin/add-users/remove-former-employee-step-4?view=o365-worldwide). Microsoft. (n.d.). *Step 5: Give another employee access to OneDrive and Outlook data.* Microsoft Learn. [Read the file handoff guidance](https://learn.microsoft.com/en-us/microsoft-365/admin/add-users/remove-former-employee-step-5?view=o365-worldwide). Microsoft. (n.d.). *Device actions.* Microsoft Learn. [Read the device-action prerequisites](https://learn.microsoft.com/en-us/intune/device-management/actions/). Technical sources reviewed November 2, 2026. Confirm current tenant settings, subscriptions, and preservation requirements before making changes. ![Image of Brandon Phipps](https://www.secondstartechnologies.com/hs-fs/hubfs/SH1782.png?height=150&name=SH1782.png) Brandon Phipps Brandon Phipps is the owner of Second Star Technologies in Bakersfield, California. His work includes business computer and network support, cybersecurity services, and backup and disaster recovery planning. He writes practical business technology resources for the Second Star Technologies website. [Connect with Brandon on LinkedIn.](https://www.linkedin.com/in/sstbrandonphipps) Blog posts ## Related Articles. [![Navigating the Top 10 Cybersecurity Challenges in 2025](https://www.secondstartechnologies.com/hs-fs/hubfs/Navigating%20the%20Top%2010%20Cybersecurity%20Challenges%20in%202025.jpeg?width=560&height=315&name=Navigating%20the%20Top%2010%20Cybersecurity%20Challenges%20in%202025.jpeg)](https://www.secondstartechnologies.com/blog/navigating-the-top-10-cybersecurity-challenges-in-2025) ![Image of Brandon Phipps](https://www.secondstartechnologies.com/hs-fs/hubfs/SH1782.png?height=60&name=SH1782.png) Brandon Phipps ### [Top 10 Cybersecurity Challenges in 2025](https://www.secondstartechnologies.com/blog/navigating-the-top-10-cybersecurity-challenges-in-2025) [Read Top 10 Cybersecurity Challenges in 2025](https://www.secondstartechnologies.com/blog/navigating-the-top-10-cybersecurity-challenges-in-2025) [![Remote Monitoring and Management (RMM) Core of Managed IT Services](https://www.secondstartechnologies.com/hs-fs/hubfs/Remote%20Monitoring%20and%20Management%20(RMM)%20Core%20of%20Managed%20IT%20Services.jpeg?width=560&height=315&name=Remote%20Monitoring%20and%20Management%20(RMM)%20Core%20of%20Managed%20IT%20Services.jpeg)](https://www.secondstartechnologies.com/blog/remote-monitoring-and-management-rmm-core-of-managed-it-services) ![Image of Brandon Phipps](https://www.secondstartechnologies.com/hs-fs/hubfs/SH1782.png?height=60&name=SH1782.png) Brandon Phipps ### [Remote Monitoring and Management (RMM): Core of Managed IT Services](https://www.secondstartechnologies.com/blog/remote-monitoring-and-management-rmm-core-of-managed-it-services) Remote monitoring and management (RMM) helps an IT provider check covered devices and perform maintenance remotely. It can collect status information, generate ... [Read Remote Monitoring and Management (RMM): Core of Managed IT Services](https://www.secondstartechnologies.com/blog/remote-monitoring-and-management-rmm-core-of-managed-it-services) **Second Star Technologies** P.O. Box 82062 Bakersfield, CA 93380 [(661) 769-6145](tel:+16617696145) [sales@secondstartechnologies.com](mailto:sales@secondstartechnologies.com) [Request Business IT Support](https://www.secondstartechnologies.com/contact) ## Privacy Policy [Privacy Policy](https://www.secondstartechnologies.com/privacy-policy) ## Cookie Policy [Cookie Policy](https://www.secondstartechnologies.com/cookie-policy) All Rights Reserved. © 2026 Second Star Technologies [Facebook](https://www.facebook.com/secondstartech)[LinkedIn](https://www.linkedin.com/company/2869307/)[X](https://x.com/secondstartech)[Instagram](https://www.instagram.com/secondstartech/)[YouTube](https://www.youtube.com/@secondstartech) Published November 2, 2026 ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Brandon Phipps", "url" : "https://www.secondstartechnologies.com/blog/author/brandon-phipps" }, "dateModified" : "2026-11-02T18:17:54.723Z", "datePublished" : "2026-11-02T18:17:54.000Z", "headline" : "Employee Leaving? A Microsoft 365 Access and Data Handoff Checklist", "image" : [ "https://www.secondstartechnologies.com/hubfs/exec-76cf5a6f-2081-4eb7-8914-959246e3ec75-1.png" ], "mainEntityOfPage" : { "@id" : "https://www.secondstartechnologies.com/blog/employee-leaving-a-microsoft-365-access-and-data-handoff-checklist", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://www.secondstartechnologies.com/hubfs/SST%20Logo%20Square.png" }, "name" : "Second Star Technologies" } } ```