← Blog
Employee Onboarding and Offboarding: The IT Checklist That Prevents Headaches
A concrete workflow for when someone joins or leaves — no forgotten access or wasted licenses.
Every company does this. Few do it with documentation. The result: after a few years, no one knows who still has active access, how many M365 licenses are unused, or whose phone is still registered in the system.
When a new employee arrives
- Account in Active Directory / Entra ID
- M365 license of the appropriate type
- Group access based on role (not 'like Janez')
- Email, signature, mobile device
- Workstation setup
- MFA registration
- Brief instructions for reporting issues (support portal)
When an employee leaves
- Account lockout at a strictly agreed time
- Password change and revocation of active sessions
- Mail forwarding to a manager or shared mailbox
- Transfer of OneDrive content to a manager
- Unregistering mobile devices
- Removal from all groups and external systems
- Releasing the M365 license
- Entry in the offboarding log
Why it matters
An active account of a former employee is one of the most common security holes. At the same time, unused M365 licenses can mean hundreds of euros in unnecessary costs per company annually.
#HR#processes#security#licenses